Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0ead90b0 by Salvatore Bonaccorso at 2026-05-24T07:51:13+02:00
Add assigned CVE-2026-48829 for gsasl
- - - - -
2 changed files:
- data/CVE/list
- data/DSA/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4954,10 +4954,8 @@ CVE-2026-43480 (In the Linux kernel, the following
vulnerability has been resolv
[trixie] - linux 6.12.85-1
[bookworm] - linux 6.1.170-1
NOTE:
https://git.kernel.org/linus/53f3a900e9a383d47af7253076e19f510c5708d0 (7.0-rc4)
-CVE-2026-XXXX [NULL pointer dereference in DIGEST-MD5]
+CVE-2026-48829 [NULL pointer dereference in DIGEST-MD5]
- gsasl 2.2.3-1
- [trixie] - gsasl 2.2.2-1.1+deb13u1
- [bookworm] - gsasl 2.2.0-1+deb12u1
NOTE:
https://lists.gnu.org/archive/html/help-gsasl/2026-05/msg00002.html
NOTE: Fixed by:
https://codeberg.org/gsasl/gsasl/commit/da9b5ae2962b014879e4a406c3b38f25aa70e97a
(v2.2.3)
CVE-2026-XXXX [RUSTSEC-2026-0122]
=====================================
data/DSA/list
=====================================
@@ -86,6 +86,7 @@
{CVE-2025-23085 CVE-2025-23166 CVE-2025-55131 CVE-2025-59465
CVE-2025-59466 CVE-2026-21710 CVE-2026-21713 CVE-2026-21714}
[bookworm] - nodejs 18.20.4+dfsg-1~deb12u2
[14 May 2026] DSA-6271-1 gsasl - security update
+ {CVE-2026-48829}
[bookworm] - gsasl 2.2.0-1+deb12u1
[trixie] - gsasl 2.2.2-1.1+deb13u1
[14 May 2026] DSA-6270-1 postgresql-17 - security update
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0ead90b01df6af6b396c334bc120d450eed68c17
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0ead90b01df6af6b396c334bc120d450eed68c17
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
