[Git][security-tracker-team/security-tracker][master] Track fix via experimental for CVE-2026-65918

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1568c693 by Salvatore Bonaccorso at 2026-10-20T17:29:59+02:00
Track fix via experimental for CVE-2026-65918

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -113714,12 +113714,13 @@ CVE-2026-65920 (Diffusers through 0.39.0, fixed in commit cee298c, contains a pa
 CVE-2026-65919 (Meshery before 1.0.57 contains an unauthenticated arbitrary file read  ...)
 	NOT-FOR-US: Meshery
 CVE-2026-65918 (PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains  ...)
+	[experimental] - pytorch-vision 0.29.1-1~exp1
 	- pytorch-vision <unfixed> (bug #1142689)
 	[trixie] - pytorch-vision <no-dsa> (Minor issue)
 	[bookworm] - pytorch-vision <postponed> (Minor issue)
 	NOTE: https://github.com/pytorch/vision/issues/9551
 	NOTE: https://github.com/pytorch/vision/pull/9520
-	NOTE: Fixed by: https://github.com/pytorch/vision/commit/4e05dc22f5f050a9528cc0ea09ceca6cdaf8f4ed
+	NOTE: Fixed by: https://github.com/pytorch/vision/commit/4e05dc22f5f050a9528cc0ea09ceca6cdaf8f4ed (v0.29.0-rc1)
 CVE-2026-65917 (CyberPanel through 1.9.1, fixed in commit b198460, contains an insecur ...)
 	NOT-FOR-US: CyberPanel
 CVE-2026-65916 (CyberPanel through 1.9.1, fixed in commit b198460, contains a missing  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1568c69357f0abee7900b239325bd549bd35df93

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1568c69357f0abee7900b239325bd549bd35df93
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261020/42fb74a1/attachment.htm>