Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
c49357a9 by Salvatore Bonaccorso at 2026-09-23T14:16:57+02:00
Add two new yara issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -386,9 +386,13 @@ CVE-2026-88345 (An out-of-bounds read vulnerability exists
in the schema lexer o
CVE-2026-88344 (An out-of-bounds read vulnerability exists in the schema lexer
of flat ...)
NOT-FOR-US: Dvidelabs flatcc
CVE-2026-88341 (A reachable assertion vulnerability exists in YARA 4.5.8 when
loading ...)
- TODO: check
+ - yara <unfixed>
+ NOTE: https://github.com/VirusTotal/yara/issues/2238
+ NOTE: Fixed by:
https://github.com/NOUIY/yara/commit/0cdff36723cd260243bb2b330bda555693354760
CVE-2026-88340 (An invalid pointer release vulnerability exists in YARA 4.5.8
during d ...)
- TODO: check
+ - yara <unfixed>
+ NOTE: https://github.com/VirusTotal/yara/issues/2239
+ NOTE: https://github.com/VirusTotal/yara/pull/2244
CVE-2026-88339 (A NULL pointer dereference vulnerability exists in the
gf_sg_vrml_fiel ...)
TODO: check
CVE-2026-88020 (Autonomy Logic OpenPLC 3is susceptible to an improper
neutralization o ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c49357a91f65eec54da7635337b83c6e7e630473
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c49357a91f65eec54da7635337b83c6e7e630473
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
