Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
290dc8fb by Salvatore Bonaccorso at 2026-07-29T23:00:58+02:00
Add two new bison issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -233,9 +233,13 @@ CVE-2026-57834 (Apache Traffic Server allows request
smuggling if chunked messag
- trafficserver <unfixed>
NOTE: https://lists.apache.org/thread/5prl9glcm9g2swnq9hqxvnokylm1gr6d
CVE-2026-56390 (GNU Bison improperly handles grammar\u2011defined output
paths. Gramma ...)
- TODO: check
+ - bison <unfixed>
+ NOTE: https://cert.pl/en/posts/2026/07/CVE-2026-56389/
+ NOTE:
https://cgit.git.savannah.gnu.org/cgit/bison.git/commit/?id=8d101c19d4d9aaedf83a448c925513742d4efcf0
CVE-2026-56389 (GNU Bison allows for an execution of an arbitrary program
during HTML ...)
- TODO: check
+ - bison <unfixed>
+ NOTE: https://cert.pl/en/posts/2026/07/CVE-2026-56389
+ NOTE:
https://cgit.git.savannah.gnu.org/cgit/bison.git/commit/?id=3169c1e7a2c6acc4c59dfcf8b089896d6881925b
CVE-2026-55995 (A Double Free vulnerability in open-iscsi allows
anunauthenticatedMITM ...)
TODO: check
CVE-2026-54735 (Prebid Server is an open-source solution for running real-time
adverti ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/290dc8fb0866e49c48b00b6a5b2d8ec713549d08
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/290dc8fb0866e49c48b00b6a5b2d8ec713549d08
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
