Utkarsh Gupta pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d1a9f349 by Utkarsh Gupta at 2026-10-02T00:45:12+05:30
lts: expat postponed in bookworm
- - - - -
66bd6f01 by Utkarsh Gupta at 2026-10-02T01:23:44+05:30
lts: redis postponed in bookworm
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -44053,6 +44053,7 @@ CVE-2026-82678 (A vulnerability was identified in
diem-project diem up to 5.1.3.
CVE-2026-82677 (A vulnerability was determined in valkey-io valkey 9.1.0.
Impacted is ...)
- redict <unfixed>
- redis <unfixed>
+ [bookworm] - redis <postponed> (Minor issue; requires a loaded module)
- valkey 9.1.2-1 (bug #1146641)
NOTE: https://github.com/valkey-io/valkey/issues/4200
NOTE: https://github.com/valkey-io/valkey/pull/4211
@@ -44103,6 +44104,7 @@ CVE-2026-82659 (nodemailer before 9.0.1 fails to apply
disableFileAccess and dis
CVE-2026-82631 (A security flaw has been discovered in valkey-io valkey 9.1.0.
The aff ...)
- redict <unfixed>
- redis <unfixed>
+ [bookworm] - redis <postponed> (Minor issue; requires a loaded module)
- valkey 9.1.2-1 (bug #1146641)
NOTE: https://github.com/valkey-io/valkey/issues/4198
NOTE: https://github.com/valkey-io/valkey/pull/4212
@@ -119436,6 +119438,7 @@ CVE-2026-6716
CVE-2026-56132 (In libexpat before 2.8.2, there is a heap-based buffer
overflow in doP ...)
{DSA-6404-1}
- expat 2.8.2-1 (bug #1140388)
+ [bookworm] - expat <postponed> (Minor issue; needs external parameter
entity parsing)
NOTE: https://github.com/libexpat/libexpat/pull/1272
CVE-2026-56131 (libexpat before 2.8.2 lacks handler call depth tracking for
calls to X ...)
{DSA-6404-1 DLA-4765-1}
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/62db517a5535478eb844bf3b058cdd34e381be50...66bd6f015ec9e7a7e63b5b9124d2f82b3f25e990
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/62db517a5535478eb844bf3b058cdd34e381be50...66bd6f015ec9e7a7e63b5b9124d2f82b3f25e990
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
