[Git][security-tracker-team/security-tracker][master] Add CVE-2026-91752/libextractor

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f6e6c136 by Salvatore Bonaccorso at 2026-09-15T10:05:26+02:00
Add CVE-2026-91752/libextractor

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -9,7 +9,9 @@ CVE-2026-91771 (Weights & Biases wandb before 0.29.0 fails to validate the file
 CVE-2026-91770 (IceHRM before 36.0.0 fails to validate employee ownership on seven RES ...)
 	NOT-FOR-US: IceHRM
 CVE-2026-91752 (GNU libextractor before 1.15 contains a stack-based buffer overflow vu ...)
-	TODO: check
+	- libextractor 1:1.17-1
+	NOTE: https://github.com/Haitam-lazaar/libextractor-ole2-rce
+	NOTE: https://git.gnunet.org/gnunet/libextractor/commit/04004eb19033e093938138b09befdf31e71e8522.html
 CVE-2026-91751 (Flextype CMS through 1.0.0-alpha.3 fails to properly validate id and n ...)
 	NOT-FOR-US: Flextype CMS
 CVE-2026-91750 (WeKnora before 0.7.0 fails to re-validate HTTP redirect targets in the ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f6e6c136df107af52cf4742b4d611e6e276972fa

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f6e6c136df107af52cf4742b4d611e6e276972fa
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260915/a3016b47/attachment-0001.htm>