[Git][security-tracker-team/security-tracker][master] Add CVE-2026-103641/gegl

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
615131aa by Salvatore Bonaccorso at 2026-10-01T12:48:21+02:00
Add CVE-2026-103641/gegl

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -131,7 +131,9 @@ CVE-2026-13313 (An Active Debug Code vulnerability in certain ASUS router models
 CVE-2026-12241 (The Advanced Woo Labels \u2013 Product Labels & Badges for WooCommerce ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-103641 (A flaw was found in GEGL. The Radiance HDR loader reads past the end o ...)
-	TODO: check
+	- gegl <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2544420
+	TODO: check status upstream
 CVE-2026-103592 (simple-php-router through 5.4.1.7 contains an IP restriction bypass vu ...)
 	NOT-FOR-US: simple-php-router
 CVE-2026-103591 (DeepWiki-Open through commit d92819a contains an unauthenticated arbit ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/615131aa893b19817f85ccb6c0f608c92d3426f5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/615131aa893b19817f85ccb6c0f608c92d3426f5
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261001/860c4456/attachment.htm>