[Git][security-tracker-team/security-tracker][master] php-getid3 fixed in sid

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b6105f17 by Moritz Muehlenhoff at 2026-09-22T11:06:55+02:00
php-getid3 fixed in sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -689,7 +689,7 @@ CVE-2026-94108 (getID3 through 1.9.26 contains an XML external entity injection
 CVE-2026-94107 (NivoCart through 2.4.0 contains a predictable password reset token vul ...)
 	NOT-FOR-US: NivoCart
 CVE-2026-94106 (getID3 before 1.9.26 contains an OS command injection vulnerability in ...)
-	- php-getid3 <unfixed> (bug #1148666)
+	- php-getid3 1.9.26+dfsg-1 (bug #1148666)
 	NOTE: https://github.com/JamesHeinrich/getID3/security/advisories/GHSA-qf3m-pmjh-h6fx
 	NOTE: https://github.com/JamesHeinrich/getID3/issues/503
 	NOTE: https://github.com/JamesHeinrich/getID3/commit/ce598c4f3823441d878c5a7a2a9f2f703a3e10b6 (v1.9.26)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b6105f17d65da1b644d9682e97128375eac24400

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b6105f17d65da1b644d9682e97128375eac24400
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260922/2a10734e/attachment.htm>