[Git][security-tracker-team/security-tracker][master] new libpodofo issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2f3306d6 by Moritz Muehlenhoff at 2026-09-20T20:52:22+02:00
new libpodofo issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1742,7 +1742,9 @@ CVE-2026-54634 (Hamlib is a ham radio control library for radios, rotators, and
 	NOTE: https://github.com/Hamlib/Hamlib/commit/3e3f78fc7732a4ce0da97b7a86d6d9fd9bd117c4 (4.7.2)
 	NOTE: https://github.com/Hamlib/Hamlib/commit/47171005bf041f520bb134edf796b9f6fc27e6bf (4.7.2)
 CVE-2026-54633 (PoDoFo is a C++17 PDF manipulation library. From version 1.0.0 until 1 ...)
-	TODO: check
+	- libpodofo <not-affected> (Vulnerable code introduced later)
+	NOTE: https://github.com/podofo/podofo/security/advisories/GHSA-f3j2-7846-h5gg
+	NOTE: https://github.com/podofo/podofo/commit/999c519d285c4a65eba48409d9cd2da9d4743cca (1.1.1)
 CVE-2026-54627 (SAIL is a cross-platform library for loading and saving images with su ...)
 	- sail 1.2.0-1
 	NOTE: https://github.com/HappySeaFox/sail/security/advisories/GHSA-ccqf-rv86-h3wm



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2f3306d646e2fe119e1228d0dd2f1f7e9b1a275b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2f3306d646e2fe119e1228d0dd2f1f7e9b1a275b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260920/c8be527a/attachment.htm>