Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
86a11974 by Salvatore Bonaccorso at 2026-10-01T07:24:42+02:00
Add CVE-2026-32148/erlang-hex
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -151982,7 +151982,12 @@ CVE-2026-34995
CVE-2026-34994
REJECTED
CVE-2026-32148 (Insufficient Verification of Data Authenticity vulnerability
in hexpm ...)
- TODO: check
+ - erlang-hex 2.4.2-2
+ NOTE:
https://github.com/hexpm/hex/security/advisories/GHSA-hmv9-4mfr-m92v
+ NOTE: https://cna.erlef.org/cves/CVE-2026-32148.html
+ NOTE: https://osv.dev/vulnerability/EEF-CVE-2026-32148
+ NOTE: Introduced with:
https://github.com/hexpm/hex/commit/e01576f28c64af9fae6eb17e2dad30f6efcb303c
(v0.16.0)
+ NOTE: Fixed by:
https://github.com/hexpm/hex/commit/d7528c8199a1144511508bf3a6460026a5a14c8e
(v2.4.2)
CVE-2026-31693 (In the Linux kernel, the following vulnerability has been
resolved: c ...)
{DSA-6238-1}
- linux 6.19.6-1
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/86a119747d25589f844852fead6ce292346c1cbc
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/86a119747d25589f844852fead6ce292346c1cbc
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
