Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
4d07476c by Salvatore Bonaccorso at 2026-05-14T22:29:18+02:00
Add CVE-2026-44312/ruby-css-parser
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -128,7 +128,11 @@ CVE-2026-44348 (PoDoFo is a C++17 PDF manipulation
library. From 1.0.0 to before
NOTE: Introduced with:
https://github.com/podofo/podofo/commit/b812f67b48f6733e640e67a52ed3da306e7a39c7
(1.0.0-beta1)
NOTE: Fixed by:
https://github.com/podofo/podofo/commit/696d765c3a71ef224d4abffe1f174fef11292d7e
(1.0.4)
CVE-2026-44312 (css_parser is a Ruby CSS parser. Prior to 2.1.0 and 1.22.0,
the CSS Pa ...)
- TODO: check
+ - ruby-css-parser 2.1.0-1
+ NOTE:
https://github.com/premailer/css_parser/security/advisories/GHSA-ff6c-w6qf-7xqc
+ NOTE: https://github.com/premailer/css_parser/issues/185
+ NOTE: Fixed by:
https://github.com/premailer/css_parser/commit/35e689c904225add78e0c488cf04bad052666449
(v2.1.0)
+ NOTE: Fixed by:
https://github.com/premailer/css_parser/commit/e0c95d5abe91b237becb90ff316531a6547ada18
(v1.22.0)
CVE-2026-44308 (Spring Cloud AWS simplifies using AWS managed services in a
Spring and ...)
TODO: check
CVE-2026-44283 (etcd is a distributed key-value store for the data of a
distributed sy ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4d07476cc00fa08195a91754f57de94f5e80dcca
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4d07476cc00fa08195a91754f57de94f5e80dcca
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
