Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
7ed77531 by Salvatore Bonaccorso at 2026-09-15T07:22:03+02:00
Add CVE-2026-84445/golang-google-grpc
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -239,7 +239,15 @@ CVE-2026-85921 (Double free in Windows Secure Kernel Mode
allows an authorized a
CVE-2026-85892 (Concurrent execution using shared resource with improper
synchronizati ...)
NOT-FOR-US: Microsoft
CVE-2026-84445 (gRPC-Go is the Go language implementation of gRPC. Prior to
1.82.2 and ...)
- TODO: check
+ - golang-google-grpc <unfixed>
+ NOTE:
https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj
+ NOTE: https://github.com/grpc/grpc-go/issues/9354
+ NOTE: https://github.com/grpc/grpc-go/pull/9365
+ NOTE: Fixed by:
https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f
(master)
+ NOTE: https://github.com/grpc/grpc-go/pull/9366 (v1.83.x backports)
+ NOTE: Fixed by:
https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4
(v1.83.2)
+ NOTE: https://github.com/grpc/grpc-go/pull/9367 (v1.82.x backports)
+ NOTE: Fixed by:
https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7
(v1.82.2)
CVE-2026-84179 (Description getTopologyPageInfo merged the Nimbus daemon
configurat ...)
TODO: check
CVE-2026-82920 (Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x
<= 11.7 ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7ed7753172fac5c61324c29e0fdbaf9e7536c2f4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7ed7753172fac5c61324c29e0fdbaf9e7536c2f4
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
