[Git][security-tracker-team/security-tracker][master] Add two libvmime issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
301a29b0 by Salvatore Bonaccorso at 2026-10-29T08:07:13+01:00
Add two libvmime issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4304,9 +4304,13 @@ CVE-2026-116741 (Speex (libspeex) through 1.2.1 contains an out-of-bounds write
 CVE-2026-116740 (libcss through 0.9.2 contains a NULL pointer dereference vulnerability ...)
 	TODO: check
 CVE-2026-116739 (VMime through 0.9.2 contains an information disclosure vulnerability i ...)
-	TODO: check
+	- libvmime <unfixed>
+	NOTE: https://github.com/kisli/vmime/pull/363
+	NOTE: Fixed by: https://github.com/kisli/vmime/commit/e85925eddc638939f0eeb7ee55ec047d04a760d8
 CVE-2026-116738 (VMime through 0.9.2 contains an integer underflow in the uuEncoder::de ...)
-	TODO: check
+	- libvmime <unfixed>
+	NOTE: https://github.com/kisli/vmime/pull/363
+	NOTE: Fixed by: https://github.com/kisli/vmime/commit/e85925eddc638939f0eeb7ee55ec047d04a760d8
 CVE-2026-116737 (libphdi through 20260902 contains a heap out-of-bounds read vulnerabil ...)
 	TODO: check
 CVE-2026-116736 (Libpff through 20260926 contains a heap out-of-bounds read vulnerabili ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/301a29b09a07101ce428416295fe198ad927474b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/301a29b09a07101ce428416295fe198ad927474b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261029/9fbfa26e/attachment-0001.htm>