Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker
Commits:
2a87ff2d by Chris Lamb at 2026-03-05T13:20:33-08:00
Triage CVE-2026-2219 in dpkg for bullseye LTS.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -821,6 +821,7 @@ CVE-2026-2219 [dpkg-deb: Persistent hang on malformed .deb
archives (DoS)]
- dpkg 1.23.6 (bug #1129722)
[trixie] - dpkg <no-dsa> (Minor issue; can be fixed in point release)
[bookworm] - dpkg <no-dsa> (Minor issue; can be fixed in point release)
+ [bullseye] - dpkg <postponed> (Minor issue; can be fixed in next update
after bookworm point release)
NOTE: Fixed by:
https://git.dpkg.org/cgit/dpkg/dpkg.git/commit/?id=6610297a62c0780dd0e80b0e302ef64fdcc9d313
CVE-2026-3381 (Compress::Raw::Zlib versions through 2.219 for Perl use
potentially in ...)
- libcompress-raw-zlib-perl 2.011-2
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2a87ff2d0a774abba6de940953ab8672197ce07c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2a87ff2d0a774abba6de940953ab8672197ce07c
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
