[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-110642

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b1574d67 by Salvatore Bonaccorso at 2026-10-26T19:32:43+01:00
Add Debian bug reference for CVE-2026-110642

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -16490,7 +16490,7 @@ CVE-2026-110644 (nodejs-whisper through 0.3.1 contains an OS command injection v
 CVE-2026-110643 (transcribe2texts through 1.0.6 contains an OS command injection vulner ...)
 	NOT-FOR-US: transcribe2texts
 CVE-2026-110642 (xhtml2pdf before 0.2.19 contains an OS command injection vulnerability ...)
-	- xhtml2pdf <unfixed> (unimportant)
+	- xhtml2pdf <unfixed> (unimportant; bug #1152196)
 	NOTE: https://github.com/xhtml2pdf/xhtml2pdf/commit/654f0de6ff4995eb058bfdf55dfa8ae4e4e3f154 (v0.2.21)
 	NOTE: https://github.com/xhtml2pdf/xhtml2pdf/pull/835
 	NOTE: Negligible security impact



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b1574d6707cd11315a3a890277632a943e842c1d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b1574d6707cd11315a3a890277632a943e842c1d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261026/7467e140/attachment-0001.htm>