[Git][security-tracker-team/security-tracker][master] new libmspack issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ea775033 by Moritz Muehlenhoff at 2026-10-16T14:39:47+02:00
new libmspack issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2248,7 +2248,8 @@ CVE-2026-110604 (Mini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-o
 CVE-2026-110603 (LASzip through 3.5.0 contains an invalid free vulnerability in laszip_ ...)
 	TODO: check
 CVE-2026-110602 (libmspack through 0.11alpha contains an uninitialized pointer free vul ...)
-	TODO: check
+	- libmspack <unfixed>
+	NOTE: https://github.com/kyz/libmspack/commit/4d868504114346aa767d435fbb89a8b76603493f
 CVE-2026-110601 (libsixel before 1.8.7-r1 and 1.9.0 through 1.10.5 contains a heap out- ...)
 	TODO: check
 CVE-2026-110600 (xlsxio through 0.2.37 contains a NULL pointer dereference vulnerabilit ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ea77503312c3c4acb5c1e861aacd9ffd4aab1d5c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ea77503312c3c4acb5c1e861aacd9ffd4aab1d5c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261016/56f1ad18/attachment.htm>