[Git][security-tracker-team/security-tracker][master] Two libimager-perl issues now fixed in unstable

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fe1c7abf by Salvatore Bonaccorso at 2026-10-05T22:08:16+02:00
Two libimager-perl issues now fixed in unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2801,7 +2801,7 @@ CVE-2026-93546 (Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4
 	NOTE: Fixed by: https://github.com/apache/httpd/commit/fa8c354189597453b2c8b38e081efa9b723abd3c
 CVE-2026-102505 (Imager versions before 1.037 for Perl overflow a heap buffer fetching  ...)
 	[experimental] - libimager-perl 1.037+dfsg-1
-	- libimager-perl <unfixed>
+	- libimager-perl 1.037+dfsg-2
 	[trixie] - libimager-perl <no-dsa> (Minor issue)
 	[bookworm] - libimager-perl <postponed> (Minor issue; overflow only via getsamples(type => 'float') on paletted images)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/43998313/
@@ -2809,7 +2809,7 @@ CVE-2026-102505 (Imager versions before 1.037 for Perl overflow a heap buffer fe
 	NOTE: Fixed by: https://github.com/tonycoz/imager/commit/aae49c6be065aa467e834105c816359394a634db (v1.037)
 CVE-2026-102504 (Imager versions before 1.037 for Perl exit the process reading a raw i ...)
 	[experimental] - libimager-perl 1.037+dfsg-1
-	- libimager-perl <unfixed>
+	- libimager-perl 1.037+dfsg-2
 	[trixie] - libimager-perl <no-dsa> (Minor issue)
 	[bookworm] - libimager-perl <postponed> (Minor issue; needs an untrusted raw_datachannels option passed to read())
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/43998314/



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fe1c7abfbdf90d0ab9e999c0b829190af7dff1eb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fe1c7abfbdf90d0ab9e999c0b829190af7dff1eb
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261005/4e244aa6/attachment.htm>