[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for scribus issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Nov 3 20:44:45 GMT 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d7478112 by Salvatore Bonaccorso at 2026-11-03T21:42:11+01:00
Add Debian bug reference for scribus issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2916,25 +2916,25 @@ CVE-2026-104623 (A security vulnerability exists in the authorization handling f
 CVE-2026-104615 (A security vulnerability was discovered in SUSE Rancher Fleet's cluste ...)
 	NOT-FOR-US: SuSE software not packaged in Debian
 CVE-2026-104067 (Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds  ...)
-	- scribus <unfixed>
+	- scribus <unfixed> (bug #1152971)
 	NOTE: https://github.com/scribusproject/scribus/commit/c6aed467680d04e8ae8e0588579b095acdae40ef
 CVE-2026-104066 (Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap buffer ove ...)
-	- scribus <unfixed>
+	- scribus <unfixed> (bug #1152971)
 	NOTE: https://github.com/scribusproject/scribus/commit/d667b3b1d38e1808721315dc976d67b72070f6b4
 CVE-2026-104065 (Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds  ...)
-	- scribus <unfixed>
+	- scribus <unfixed> (bug #1152971)
 	NOTE: https://github.com/scribusproject/scribus/commit/69f52b53c78542b0a5d377fa0b058fb2773799dc
 CVE-2026-104064 (Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an integer overfl ...)
-	- scribus <unfixed>
+	- scribus <unfixed> (bug #1152971)
 	NOTE: https://github.com/scribusproject/scribus/commit/b3e2be4e0f4063991c0b3af1c1447218ed33f0cc
 CVE-2026-104063 (Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds  ...)
-	- scribus <unfixed>
+	- scribus <unfixed> (bug #1152971)
 	NOTE: https://github.com/scribusproject/scribus/commit/d667b3b1d38e1808721315dc976d67b72070f6b4
 CVE-2026-104062 (Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap buffer ove ...)
-	- scribus <unfixed>
+	- scribus <unfixed> (bug #1152971)
 	NOTE: https://github.com/scribusproject/scribus/commit/d667b3b1d38e1808721315dc976d67b72070f6b4
 CVE-2026-104061 (Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap out-of-bou ...)
-	- scribus <unfixed>
+	- scribus <unfixed> (bug #1152971)
 	NOTE: https://github.com/scribusproject/scribus/commit/cca3e4991dd199c103edb4a3bc5351f5cb88d62b
 CVE-2026-102918 (The Redux Framework plugin for WordPress is vulnerable to Stored Cross ...)
 	NOT-FOR-US: WordPress plugin



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d747811201c142ccac2c37598221eef9cf5e9be2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d747811201c142ccac2c37598221eef9cf5e9be2
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261103/f5fab7b3/attachment.htm>


More information about the debian-security-tracker-commits mailing list