Control: retitle -1 nfs-ganesha: CVE-2026-105516 CVE-2026-105517 Hi,
On Fri, Oct 09, 2026 at 07:28:52AM +0200, Salvatore Bonaccorso wrote: > Source: nfs-ganesha > Version: 9.14-1 > Severity: important > Tags: security upstream > X-Debbugs-Cc: [email protected], Debian Security Team > <[email protected]> > > Hi, > > The following vulnerability was published for nfs-ganesha. > > CVE-2026-105516[0]: > | 9P TWALK component count stack buffer overflow And there is as well CVE-2026-105517, cf. https://bugzilla.redhat.com/show_bug.cgi?id=2545966, but both covered by removing the 9P implementation. So covering the second CVE as well with this bugreport. Regards, Salvatore
