[Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-107651/eog

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d53ef9f5 by Salvatore Bonaccorso at 2026-10-19T12:58:00+02:00
Update status for CVE-2026-107651/eog

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -16342,9 +16342,10 @@ CVE-2026-107660 (FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper c
 	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/0cd2a70eacd510c2efed48b9fc177c7cb2bc549f (n8.1.3)
 	NOTE: mbedtls not enabled in Debian builds
 CVE-2026-107651 (A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow e ...)
-	- eog <unfixed> (bug #1150455)
+	- eog 50.4-1 (bug #1150455)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2547986
 	NOTE: https://gitlab.gnome.org/GNOME/eog/-/issues/342
+	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/eog/-/commit/04e4f313421eacb9fc529781542bb7fb81a3cd1a (50.4)
 CVE-2026-107640 (Integrics Enswitch 3.13 through 4.4 contains an authentication bypass  ...)
 	NOT-FOR-US: Integrics Enswitch
 CVE-2026-107639 (ILIAS before 9.24, 10.x before 10.12 and 11.x before 11.5 contains an  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d53ef9f51073c9627a77a007a6a5b70b36c3146f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d53ef9f51073c9627a77a007a6a5b70b36c3146f
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261019/d0babfd7/attachment.htm>