[Git][security-tracker-team/security-tracker][master] new libaec issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
947caf73 by Moritz Muehlenhoff at 2026-11-03T23:40:22+01:00
new libaec issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -644,7 +644,10 @@ CVE-2026-120459 (python-jose through 3.5.0 contains an authentication bypass vul
 CVE-2026-120458 (Kvazaar through 2.3.2 contains an infinite loop vulnerability in read_ ...)
 	TODO: check
 CVE-2026-120457 (libaec through 1.1.7 contains an out-of-bounds read vulnerability in m ...)
-	TODO: check
+	- libaec <unfixed>
+	[trixie] - libaec <no-dsa> (Minor issue)
+	NOTE: https://github.com/Deutsches-Klimarechenzentrum/libaec/issues/64
+	NOTE: https://github.com/Deutsches-Klimarechenzentrum/libaec/commit/efcc8f200fdc5fc674353cebcb20c1fe197bc055
 CVE-2026-120456 (L-SMASH through 2.14.5 contains a heap out-of-bounds write vulnerabili ...)
 	TODO: check
 CVE-2026-120455 (rapidyaml through 0.16.0 contains an out-of-bounds write vulnerability ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/947caf73821c201c5ff4a946700dab9040df5d66

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/947caf73821c201c5ff4a946700dab9040df5d66
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261103/4c34b3ea/attachment.htm>