Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 3ed9dd28 by Salvatore Bonaccorso at 2026-09-23T15:55:22+02:00 Add two rsyslog issues - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,6 @@ +CVE-2026-92709 + - rsyslog <unfixed> + NOTE: https://github.com/rsyslog/rsyslog/security/advisories/GHSA-xmp9-244p-5ggv CVE-2026-93403 [Stack-based Buffer Overflow in mmpstrucdata rsyslog plugin] - rsyslog 8.2606.0-4 [trixie] - rsyslog 8.2504.0-1+deb13u2 @@ -5,6 +8,12 @@ CVE-2026-93403 [Stack-based Buffer Overflow in mmpstrucdata rsyslog plugin] NOTE: Fixed in major cleanup and refactoring of mmpstrucdata: NOTE: https://github.com/rsyslog/rsyslog/pull/6991 NOTE: Fixed by: https://github.com/rsyslog/rsyslog/commit/bcda60a3692efdf0c8e44102528f5a0ebe0dec6d (v8.2606.0) +CVE-2026-93402 [mdtls discards the peer-identity verification result] + - rsyslog <unfixed> + NOTE: https://github.com/rsyslog/rsyslog/security/advisories/GHSA-8v8w-f8wf-475j + NOTE: https://github.com/rsyslog/rsyslog/pull/7617 + NOTE: Fixed by: https://github.com/rsyslog/rsyslog/commit/ef9f77d709640ceb3d5e78118081a291f9e373c5 + NOTE: Fixed by: https://github.com/rsyslog/rsyslog/commit/7847bd5392cb018646afc8f267aedfb5d51df1f9 CVE-2026-XXXX [GHSA-v8qw-hwjv-44hw: AV1/libaom path allows allocation before libheif rejects mismatched coded dimensions] - libheif <unfixed> NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-v8qw-hwjv-44hw View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3ed9dd28523478948006ed8b0f385547cf558543 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3ed9dd28523478948006ed8b0f385547cf558543 You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
