[Git][security-tracker-team/security-tracker][master] new netpbm issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4ff27322 by Moritz Muehlenhoff at 2026-11-03T23:34:07+01:00
new netpbm issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -681,19 +681,26 @@ CVE-2026-120439 (QuickJS-NG before 0.16.0 contains an integer overflow in js_typ
 CVE-2026-120438 (QuickJS-NG before 0.16.0 contains an integer overflow in js_proxy_get_ ...)
 	TODO: check
 CVE-2026-120437 (Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.0 ...)
-	TODO: check
+	- netpbm-free <unfixed>
+	NOTE: https://sourceforge.net/p/netpbm/code/5334/
 CVE-2026-120436 (Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.0 ...)
-	TODO: check
+	- netpbm-free <unfixed>
+	NOTE: https://sourceforge.net/p/netpbm/code/5324/
 CVE-2026-120435 (Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.0 ...)
-	TODO: check
+	- netpbm-free <unfixed>
+	NOTE: https://sourceforge.net/p/netpbm/code/5336/
 CVE-2026-120434 (Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.0 ...)
-	TODO: check
+	- netpbm-free <unfixed>
+	NOTE: https://sourceforge.net/p/netpbm/code/5331/
 CVE-2026-120433 (Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.0 ...)
-	TODO: check
+	- netpbm-free <unfixed>
+	NOTE: https://sourceforge.net/p/netpbm/code/5328/
 CVE-2026-120432 (Netpbm before 10.86.51, 11.02.30, and 11.15.08 contains an integer ove ...)
-	TODO: check
+	- netpbm-free <unfixed>
+	NOTE: https://sourceforge.net/p/netpbm/code/5335/
 CVE-2026-120431 (Netpbm before 10.86.51, 11.x before 11.02.29, and 11.03 before 11.15.0 ...)
-	TODO: check
+	- netpbm-free <unfixed>
+	NOTE: https://sourceforge.net/p/netpbm/code/5317/
 CVE-2026-120430 (Camaleon CMS before 2.9.2 contains an insecure direct object reference ...)
 	NOT-FOR-US: Camaleon CMS
 CVE-2026-120429 (Camaleon CMS before 2.9.2 contains a missing authorization vulnerabili ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4ff27322542df4f80f0875bbaacc53926f0f1a04

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4ff27322542df4f80f0875bbaacc53926f0f1a04
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261103/f89eb5ab/attachment-0001.htm>