[Git][security-tracker-team/security-tracker][master] Split off the non-cveified eog issue

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
10519e51 by Salvatore Bonaccorso at 2026-10-28T15:35:00+01:00
Split off the non-cveified eog issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -31448,12 +31448,15 @@ CVE-2026-107660 (FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper c
 	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/d377212904a19fc740d721cbda0ba58fa3805a29 (n9.0.2)
 	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/0cd2a70eacd510c2efed48b9fc177c7cb2bc549f (n8.1.3)
 	NOTE: mbedtls not enabled in Debian builds
+CVE-2026-XXXX [EogMetadataReaderPng: Avoid buffer overflow with malformed iCCP chunks]
+	- eog 50.4-1
+	NOTE: https://gitlab.gnome.org/GNOME/eog/-/issues/342
+	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/eog/-/commit/04e4f313421eacb9fc529781542bb7fb81a3cd1a (50.4)
 CVE-2026-107651 (A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow e ...)
 	- eog 50.4-1 (bug #1150455)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2547986
 	NOTE: https://gitlab.gnome.org/GNOME/eog/-/issues/342
 	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/eog/-/commit/769e4309ae6976248d8c5debe0ff85ff167ed705 (50.4)
-	NOTE: Related issue (pending CVE; see issue) fixed by https://gitlab.gnome.org/GNOME/eog/-/commit/04e4f313421eacb9fc529781542bb7fb81a3cd1a
 CVE-2026-107640 (Integrics Enswitch 3.13 through 4.4 contains an authentication bypass  ...)
 	NOT-FOR-US: Integrics Enswitch
 CVE-2026-107639 (ILIAS before 9.24, 10.x before 10.12 and 11.x before 11.5 contains an  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/10519e51dc8a717082d5bf2a7cfc7b0ff02ddb7b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/10519e51dc8a717082d5bf2a7cfc7b0ff02ddb7b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261028/59c4050d/attachment.htm>