Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 3cdb515a by Salvatore Bonaccorso at 2026-09-23T15:50:41+02:00 Add CVE-206-93403/rsyslog - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,10 @@ +CVE-2026-93403 [Stack-based Buffer Overflow in mmpstrucdata rsyslog plugin] + - rsyslog 8.2606.0-4 + [trixie] - rsyslog 8.2504.0-1+deb13u2 + NOTE: https://github.com/rsyslog/rsyslog/security/advisories/GHSA-2whq-6rcm-64m8 + NOTE: Fixed in major cleanup and refactoring of mmpstrucdata: + NOTE: https://github.com/rsyslog/rsyslog/pull/6991 + NOTE: Fixed by: https://github.com/rsyslog/rsyslog/commit/bcda60a3692efdf0c8e44102528f5a0ebe0dec6d (v8.2606.0) CVE-2026-XXXX [GHSA-v8qw-hwjv-44hw: AV1/libaom path allows allocation before libheif rejects mismatched coded dimensions] - libheif <unfixed> NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-v8qw-hwjv-44hw View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3cdb515af6fa787c35eb0e1c5fa8980ca295f929 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3cdb515af6fa787c35eb0e1c5fa8980ca295f929 You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
