[Git][security-tracker-team/security-tracker][master] golang-golang-x-image fixed in sid

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
dd5ee6ba by Moritz Muehlenhoff at 2026-10-09T19:50:57+02:00
golang-golang-x-image fixed in sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -140344,12 +140344,13 @@ CVE-2026-47266 (Formie is a Craft CMS plugin for creating forms. Prior to 2.2.21
 CVE-2026-47123 (FreeScout is a free help desk and shared inbox built with PHP's Larave ...)
 	NOT-FOR-US: FreeScout
 CVE-2026-46599 (The TIFF decoder does not place a limit on the size of PackBits-compre ...)
-	- golang-golang-x-image <unfixed> (bug #1138257)
+	- golang-golang-x-image 0.42.0-1 (bug #1138257)
 	[trixie] - golang-golang-x-image <no-dsa> (Minor issue)
 	[bookworm] - golang-golang-x-image <no-dsa> (Minor issue)
 	[bullseye] - golang-golang-x-image <no-dsa> (Minor issue)
 	NOTE: https://github.com/golang/go/issues/79577
 	NOTE: https://go-review.googlesource.com/c/image/+/759960
+	NOTE: https://github.com/golang/image/commit/fe8ae458fe5e09e39a635719a8c2ec5393d0e815 (v0.41.0)
 CVE-2026-46527 (cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTT ...)
 	- cpp-httplib <unfixed> (bug #1138578)
 	[trixie] - cpp-httplib <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dd5ee6bab794d77a664db12da254798b57262423

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dd5ee6bab794d77a664db12da254798b57262423
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261009/ad85bfea/attachment-0001.htm>