Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
335acc60 by Salvatore Bonaccorso at 2026-07-20T08:05:32+02:00
Add "new" duchwich issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3917,7 +3917,10 @@ CVE-2026-40953 (CVE-2026-40953 is a heap overflow in the
certificate parsing fun
CVE-2026-40952 (CVE-2026-40952 is a privilege misconfiguration in the Secure
Access in ...)
NOT-FOR-US: Absolute Software
CVE-2026-38974 (Dulwich through 1.1.0 was found to be missing SSH host key
verificatio ...)
- TODO: check
+ - dulwich 1.2.0-1
+ NOTE: https://github.com/jelmer/dulwich/pull/2123
+ NOTE:
https://github.com/jelmer/dulwich/commit/02c65a0c03b81619b63598154e1ce5cddc9d85cd
(dulwich-1.2.0)
+ NOTE:
https://github.com/jelmer/dulwich/commit/5bbe6de77ef902cce779b96942b74f81cfc0dacd
(dulwich-1.2.0)
CVE-2026-38755 (A heap overflow in the evalcommand() function (shell/ash.c) of
Busybox ...)
TODO: check
CVE-2026-38754 (A heap overflow in the ifsbreakup() function (shell/ash.c) of
Busybox ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/335acc603fa60c672868cfa72b1c68df8f7d8b06
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/335acc603fa60c672868cfa72b1c68df8f7d8b06
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
