Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
fb56806a by Salvatore Bonaccorso at 2026-07-14T22:43:27+02:00
Add Debian bug reference for gawk issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -649,16 +649,16 @@ CVE-2026-49876 (Authenticated SSRF in Gravitino
JobManager allows server-side HT
CVE-2026-41041 (URL path injection via unencoded user-supplied identifiers
vulnerabili ...)
NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-40553 (Buffer overflow vulnerability has been found in
"extension/readdir.c" ...)
- - gawk <unfixed>
+ - gawk <unfixed> (bug #1142071)
NOTE: Fixed by:
https://cgit.git.savannah.gnu.org/cgit/gawk.git/commit/?id=cca0366144336b49aaa7d5d949966ce8e2c70843
CVE-2026-40469 (Integer overflow vulnerability has been found in "builtin.c"
program f ...)
- - gawk <unfixed>
+ - gawk <unfixed> (bug #1142071)
NOTE: Fixed by:
https://cgit.git.savannah.gnu.org/cgit/gawk.git/commit/?id=ae1b2d508f46913269a9e62aceda3636afe8147b
CVE-2026-40468 (Integer overflow vulnerability has been found in "builtin.c"
program f ...)
- - gawk <unfixed>
+ - gawk <unfixed> (bug #1142071)
NOTE: Fixed by:
https://cgit.git.savannah.gnu.org/cgit/gawk.git/commit/?id=062f2f2581b991362c046f7f2e238ffa34e6f8c7
CVE-2026-40467 (Use After Free vulnerability has been found in "io.c" program
file of ...)
- - gawk <unfixed>
+ - gawk <unfixed> (bug #1142071)
NOTE: Fixed by:
https://cgit.git.savannah.gnu.org/cgit/gawk.git/commit/?id=a2d18c74109e41bec29a23098eba2e00057286d8
CVE-2026-26396 (OpenBMB XAgent v1.0.0 and before is vulnerable to path
traversal in th ...)
NOT-FOR-US: OpenBMB XAgent
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fb56806aafcd4d3bfc95fa0d6d48cd0b61ce01ea
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fb56806aafcd4d3bfc95fa0d6d48cd0b61ce01ea
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
