[Git][security-tracker-team/security-tracker][master] CVE-2026-74859/gnome-tweaks: precise bookworm triage

[Sylvain Beucler (@beuc)]

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bcef5980 by Sylvain Beucler at 2026-09-17T19:10:44+02:00
CVE-2026-74859/gnome-tweaks: precise bookworm triage

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -13377,7 +13377,7 @@ CVE-2026-74860 (A flaw was found in libxml2 with Python bindings enabled. A remo
 CVE-2026-74859 (The shell theme installer in gnome-tweaks extracts user-supplied ZIP a ...)
 	- gnome-tweaks <unfixed> (bug #1147509)
 	[trixie] - gnome-tweaks <no-dsa> (Minor issue)
-	[bookworm] - gnome-tweaks <postponed> (Minor issue)
+	[bookworm] - gnome-tweaks <postponed> (Minor issue, requires importing a malicious theme)
 	NOTE: https://gitlab.gnome.org/GNOME/gnome-tweaks/-/issues/542
 CVE-2026-74239 (XenForo before 2.3.13 contains a path traversal vulnerability in the s ...)
 	NOT-FOR-US: XenForo



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bcef598067a83775a62856576f7c5b87fec3b7e8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bcef598067a83775a62856576f7c5b87fec3b7e8
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260917/bcfc2b31/attachment.htm>