Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
9edbe2c9 by Salvatore Bonaccorso at 2026-09-18T20:34:58+02:00
Update status for CVE-2026-92627/hdf5
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3703,8 +3703,9 @@ CVE-2026-92717 (Covenant through 0.6 registers the
CovenantHub SignalR hub witho
CVE-2026-92716 (Shuffle through 2.2.1 contains a cross-tenant privilege
escalation vul ...)
NOT-FOR-US: Shuffle
CVE-2026-92627 (A heap-use-after-free vulnerability exists in H5T__conv_f_f()
in src/H ...)
- - hdf5 <unfixed>
+ - hdf5 <unfixed> (unimportant)
NOTE: https://pulsesecurity.co.nz/advisories/hdf5-memory-corruption
+ NOTE: HDF not covered by security support, see
https://bugs.debian.org/1117722
CVE-2026-92626 (Control iD iDSecure versions prior to4.8.3.0 are affected by
an unauth ...)
NOT-FOR-US: Control iD iDSecure
CVE-2026-92625 (Control iD iDSecure versions prior to4.8.3.0 are affected by
an unauth ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9edbe2c9d2de87ca3e89df41dbfc59d7cdf2f71e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9edbe2c9d2de87ca3e89df41dbfc59d7cdf2f71e
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
