[Git][security-tracker-team/security-tracker][master] zvbi fixed in sid

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fc578a0c by Moritz Muehlenhoff at 2026-10-22T20:10:27+02:00
zvbi fixed in sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -12351,7 +12351,10 @@ CVE-2026-110656 (miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds
 CVE-2026-110655 (miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vu ...)
 	- miniupnpc <undetermined>
 CVE-2026-110654 (libzvbi through 0.2.45 contains an out-of-bounds write vulnerability i ...)
-	- zvbi <undetermined>
+	- zvbi 0.2.46-1 (unimportant)
+	NOTE: https://github.com/zapping-vbi/zvbi/security/advisories/GHSA-p2vx-rpw8-hp43
+	NOTE: https://github.com/zapping-vbi/zvbi/commit/ec27c1eeb1f442aac287e1295ab6fe6f818250a1
+	NOTE: Negligible security impact
 CVE-2026-110652 (ONLYOFFICE DocumentServer before 10.0.0 contains an unauthenticated se ...)
 	NOT-FOR-US: ONLYOFFICE
 CVE-2026-110650 (The thumbnail Python package through 1.5 contains an OS command inject ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc578a0cf3bb7a8b19d209da959c24df1676a2dc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc578a0cf3bb7a8b19d209da959c24df1676a2dc
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261022/1154be4c/attachment.htm>