Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
04750e50 by Salvatore Bonaccorso at 2026-09-12T21:26:39+02:00
Two CVEs for freeciv issues assigned
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -6,10 +6,6 @@ CVE-2026-90559 (snappy-java through 1.1.10.8 contains an
out-of-bounds write vul
TODO: check
CVE-2026-90558 (sngrep through 1.8.4 contains stack buffer overflow
vulnerabilities in ...)
TODO: check
-CVE-2026-90557 (Freeciv versions 3.1.0 through 3.2.5 contain an out-of-bounds
read vul ...)
- TODO: check
-CVE-2026-90556 (Freeciv versions before 3.2.6 contain a heap buffer overflow
in workli ...)
- TODO: check
CVE-2026-90555 (vLLM versions before 0.28.0 fail to validate audio sample rate
headers ...)
TODO: check
CVE-2026-90554 (vLLM versions >=0.10.2 and <0.28.0 do not apply any audio
decode-size ...)
@@ -10502,11 +10498,11 @@ CVE-2026-80762 (In the Linux kernel, the following
vulnerability has been resolv
CVE-2026-80761 (In the Linux kernel, the following vulnerability has been
resolved: B ...)
- linux 7.1.12-1
NOTE:
https://git.kernel.org/linus/884cf2cc957da7ac178a0e6c6c69ddfec0481cc8 (7.3-rc1)
-CVE-2026-XXXX [freeciv Heap buffer overflow in worklist_load() via unbounded
wl_length from save file]
+CVE-2026-90556 [freeciv Heap buffer overflow in worklist_load() via unbounded
wl_length from save file]
- freeciv 3.2.6+ds-1
[trixie] - freeciv <no-dsa> (Minor issue)
NOTE: https://redmine.freeciv.org/issues/2161
-CVE-2026-XXXX [Out-of-bounds read in activities.order]
+CVE-2026-90557 [Out-of-bounds read in activities.order]
- freeciv 3.2.6+ds-1 (unimportant)
NOTE: Crash in CLI tool, no security impact
NOTE: https://redmine.freeciv.org/issues/2162
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/04750e5044adc2339d9ea9217fdce502f5279029
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/04750e5044adc2339d9ea9217fdce502f5279029
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
