[Git][security-tracker-team/security-tracker][master] DSA for vips

[Aron Xu (@aron)]

Aron Xu pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4a036843 by Aron Xu at 2026-10-11T19:59:38+08:00
DSA for vips

- - - - -


3 changed files:

- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -256897,7 +256897,6 @@ CVE-2025-59937 (go-mail is a comprehensive library for sending mails with Go. In
 	NOT-FOR-US: go-mail
 CVE-2025-59933 (libvips is a demand-driven, horizontally threaded image processing lib ...)
 	- vips 8.17.3-1 (bug #1117049)
-	[trixie] - vips <ignored> (Minor issue)
 	[bookworm] - vips <ignored> (Minor issue)
 	[bullseye] - vips <postponed> (minor issue; low impact, workaround exists)
 	NOTE: https://github.com/libvips/libvips/security/advisories/GHSA-q8px-4w5q-c2r4


=====================================
data/DSA/list
=====================================
@@ -1,3 +1,6 @@
+[11 Oct 2026] DSA-6552-1 vips - security update
+	{CVE-2025-59933 CVE-2026-33327 CVE-2026-33328 CVE-2026-35590 CVE-2026-35591 CVE-2026-69242 CVE-2026-70651 CVE-2026-70653 CVE-2026-70654}
+	[trixie] - vips 8.16.1-1+deb13u2
 [10 Oct 2026] DSA-6551-1 tor - security update
 	[trixie] - tor 0.4.9.14-0+deb13u1
 [10 Oct 2026] DSA-6550-1 ghostscript - security update


=====================================
data/dsa-needed.txt
=====================================
@@ -189,9 +189,6 @@ varnish
 vim
   Lee Garrett provided an update for review, <90276a53-99c9-4412-a26f-d84e87a8cb49 at rocketjump.eu>
 --
-vips
-  Tianyu Chen is interested in working on this update.
---
 weechat
   Upstream recommends to use branch from https://github.com/weechat/weechat/commits/4.6/, cf #1142597
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4a036843bf6e8e985c33ccae227a7059ee14ea38

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4a036843bf6e8e985c33ccae227a7059ee14ea38
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261011/ccd01b81/attachment.htm>