Arnaud Rebillout pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
dcd29787 by Arnaud Rebillout at 2026-05-27T17:28:05+07:00
CVE-2026-6238,CVE-2026-5928,CVE-2026-5450,CVE-2026-5435/glibc: bullseye
postponed
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -17017,6 +17017,7 @@ CVE-2026-6238 (The deprecated functions ns_printrrf,
ns_printrr and fp_nquery in
- glibc <unfixed> (bug #1135231)
[trixie] - glibc <no-dsa> (Minor issue)
[bookworm] - glibc <no-dsa> (Minor issue)
+ [bullseye] - glibc <postponed> (Minor issue, debugging functions)
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=34069
NOTE:
https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0012
CVE-2026-5944 (An improper access control vulnerability exists in the Cisco
Intersigh ...)
@@ -17033,6 +17034,7 @@ CVE-2026-5435 (The deprecated functions ns_printrrf,
ns_printrr and fp_nquery in
- glibc <unfixed> (bug #1135230)
[trixie] - glibc <no-dsa> (Minor issue)
[bookworm] - glibc <no-dsa> (Minor issue)
+ [bullseye] - glibc <postponed> (Minor issue, debugging functions)
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=34033
NOTE:
https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0011
CVE-2026-4911 (The Booking Package plugin for WordPress is vulnerable to Price
Manipu ...)
@@ -22094,13 +22096,17 @@ CVE-2026-5450 (Calling the scanf family of functions
with a %mc (malloc'd charac
- glibc <unfixed> (bug #1134543)
[trixie] - glibc <no-dsa> (Minor issue)
[bookworm] - glibc <no-dsa> (Minor issue)
+ [bullseye] - glibc <postponed> (Minor issue)
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=34008
NOTE:
https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0009
NOTE: Fixed by:
https://sourceware.org/git/?p=glibc.git;a=commit;h=839898777226a3ed88c0859f25ffe712519b4ead
+ NOTE: "%mc is not really usable unless bug 12701 is fixed as well" cf.
+ NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=34008#c2
CVE-2026-5928 (Calling the ungetwc function on a FILE stream with wide
characters enc ...)
- glibc <unfixed> (bug #1134544)
[trixie] - glibc <no-dsa> (Minor issue)
[bookworm] - glibc <no-dsa> (Minor issue)
+ [bullseye] - glibc <postponed> (Minor issue)
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=33998
NOTE:
https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0010
NOTE: Fixed by:
https://sourceware.org/git/?p=glibc.git;a=commit;h=ef3bfb5f910011f3780cb06aa47e730035f53285
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dcd2978783c2deabe7d82dab128694e76874d27e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dcd2978783c2deabe7d82dab128694e76874d27e
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
