[Git][security-tracker-team/security-tracker][master] Add CVE-2026-49836/psd-tools

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
99273472 by Salvatore Bonaccorso at 2026-09-11T10:58:32+02:00
Add CVE-2026-49836/psd-tools

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -209,7 +209,9 @@ CVE-2026-57844
 CVE-2026-54054 (Transmute is a free, open-source, self-hosted file conversion and comp ...)
 	NOT-FOR-US: Transmute
 CVE-2026-49836 (psd-tools is a Python package for working with Adobe Photoshop PSD fil ...)
-	TODO: check
+	- psd-tools 1.17.4+dfsg.1-1
+	NOTE: https://github.com/psd-tools/psd-tools/security/advisories/GHSA-2rmg-vrx8-9j2f
+	NOTE: https://github.com/psd-tools/psd-tools/pull/657 (v1.17.1)
 CVE-2026-3096 (The product's web portals allow external links to be opened in a new b ...)
 	NOT-FOR-US: WSO2
 CVE-2026-36392 (FairSketch Rise CRM Version 3.9.6 is vulnerable to Cross Site Scriptin ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9927347228f7a3de9217c768dc316b818f7ed11e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9927347228f7a3de9217c768dc316b818f7ed11e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260911/5ce976a1/attachment.htm>