CVE-2026-61714

ADVISORY - debian

Summary

fluidsynth 2.5.6+dfsg-1 [trixie] - fluidsynth 2.4.4+dfsg-1+deb13u3 [bookworm] - fluidsynth (Needs a non-default synth.midi-channels > 16; MIDI file channels are masked to 4 bits so a crafted file cannot reach it) [bullseye] - fluidsynth (Vulnerable code not present) https://github.com/FluidSynth/fluidsynth/security/advisories/GHSA-976m-35rw-h3m6 Introduced with: https://github.com/FluidSynth/fluidsynth/commit/6c593180ce05f8bbbd07217456bc4376a4ab4505 (v2.2.4) Fixed by: https://github.com/FluidSynth/fluidsynth/commit/772702e00cc6acc7c607efb40283e2269211effc (v2.5.6)

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.