Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: ea7e3d81 by Salvatore Bonaccorso at 2026-06-21T21:17:50+02:00 Add new CVEs for expat - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,11 +1,20 @@ CVE-2026-56412 (libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataS ...) - TODO: check + - expat <unfixed> + NOTE: https://github.com/libexpat/libexpat/pull/1278 + NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/d19e834794060d18c061d94452c35d725393ea58 CVE-2026-56411 (xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDe ...) - TODO: check + - expat <unfixed> + NOTE: https://github.com/libexpat/libexpat/pull/1263 + NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/528a4e5017e1bd3b48b689fd0c131df940ae3ea5 CVE-2026-56410 (xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSyste ...) - TODO: check + - expat <unfixed> + NOTE: https://github.com/libexpat/libexpat/pull/1252 + NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/deeb97f7c88d17a16b0ea2521a13733abc283347 + NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/cee20e91bf14dc7f6d2fc48f0d70d86b2dc3afea CVE-2026-56409 (xmlwf in libexpat before 2.8.2 has an integer overflow for the output ...) - TODO: check + - expat <unfixed> + NOTE: https://github.com/libexpat/libexpat/pull/1259 + NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/61f7cdda22546c4bee38dd2d3fa3d6e4aa64d33e CVE-2026-56408 (libexpat before 2.8.2 has an integer overflow in copyString.) TODO: check CVE-2026-56407 (libexpat before 2.8.2 has an integer overflow in doProlog that is rela ...) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ea7e3d8136ef3239c5ce4fb0f7eff6447e1f0ab4 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ea7e3d8136ef3239c5ce4fb0f7eff6447e1f0ab4 You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
