[Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-111158

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sat Oct 17 19:57:47 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5a8f7f5a by Salvatore Bonaccorso at 2026-10-17T20:57:21+02:00
Update status for CVE-2026-111158

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1764,7 +1764,9 @@ CVE-2026-111160 (LightLLM through 1.2.0 contains a denial of service vulnerabili
 CVE-2026-111159 (libewf through 20260924 contains a heap out-of-bounds read vulnerabili ...)
 	- libewf <undetermined>
 CVE-2026-111158 (EarthScope libmseed through 3.5.4 contains a heap out-of-bounds read v ...)
-	- libmseed <undetermined>
+	- libmseed <not-affected> (Vulnerable code introduced later; specific to 3.x API)
+	NOTE: Introduced with: https://github.com/EarthScope/libmseed/commit/d6efc404dde3f2409c8309ab1630fc56b02698a0 (v3.0.0)
+	NOTE: Fixed by: https://github.com/EarthScope/libmseed/commit/c93a36a1381e944b59b10967342ee1cb94304223
 CVE-2026-111157 (SoX through 14.4.2 contains a heap out-of-bounds write vulnerability i ...)
 	- sox <undetermined>
 CVE-2026-111156 (libTiMidity through 0.2.8 contains an out-of-bounds access vulnerabili ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5a8f7f5a2016da6b4e924415db7a8b0b1ae8f755

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5a8f7f5a2016da6b4e924415db7a8b0b1ae8f755
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261017/58a9fa15/attachment.htm>


More information about the debian-security-tracker-commits mailing list