[Git][security-tracker-team/security-tracker][master] Correct tracking for CVE-2026-107378/cairosvg

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
10b0f600 by Salvatore Bonaccorso at 2026-11-03T21:32:01+01:00
Correct tracking for CVE-2026-107378/cairosvg

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -38953,10 +38953,11 @@ CVE-2026-107380 (savg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, svg-
 CVE-2026-107379 (savg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, svg-sanitiz ...)
 	NOT-FOR-US: darylldoyle svg-sanitizer
 CVE-2026-107378 (CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Pr ...)
-	- cairosvg 2.9.0-1
+	- cairosvg 2.9.1-1
 	[trixie] - cairosvg <no-dsa> (Minor issue)
-	NOTE: https://github.com/Kozea/CairoSVG/security/advisories/GHSA-f38f-5xpm-9r7c
-	NOTE: Fixed by: https://github.com/Kozea/CairoSVG/commit/6dde8685ed3f19837767bce7a13a5491e3d0e0bf (2.9.0)
+	NOTE: https://github.com/Kozea/CairoSVG/security/advisories/GHSA-c3jg-qh8m-j3h2
+	NOTE: Fixed by: https://github.com/Kozea/CairoSVG/commit/9d63f049f9988d0ddda3eb94564ac3a50a286523 (2.9.1)
+	NOTE: Fixed by: https://github.com/Kozea/CairoSVG/commit/a4d585eb374724b79676e9cceaa9e9a1a4358565 (2.9.1)
 CVE-2026-107377 (datamodel-code-generator generates Python data models from schema defi ...)
 	NOT-FOR-US: datamodel-code-generator
 CVE-2026-107376 (webonyx graphql-php is a PHP implementation of the GraphQL specificati ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/10b0f6004b15766ab56847e960af667111655695

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/10b0f6004b15766ab56847e960af667111655695
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261103/517c8a0c/attachment.htm>