Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
da020086 by Salvatore Bonaccorso at 2026-10-10T10:06:42+02:00
Mark two krb5 issues as no-dsa
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1268,6 +1268,7 @@ CVE-2026-107779 (Dromara Skyeye through commit
003549ae5615bd114ba5bb8ddf6a8e8ea
NOT-FOR-US: Dromara Skyeye
CVE-2026-107778 (MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer
dereferen ...)
- krb5 <unfixed> (bug #1150461)
+ [trixie] - krb5 <no-dsa> (Minor issue)
NOTE: https://github.com/krb5/krb5/pull/1511
NOTE: Fixed by:
https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08
(master)
NOTE: Fixed by:
https://github.com/krb5/krb5/commit/62196e2b269159a5465f5b8d0ed7cf6f29c3282a
(krb5-1.22 branch)
@@ -1334,6 +1335,7 @@ CVE-2026-107709 (A path traversal vulnerability exists in
Bower decompress-zip t
NOT-FOR-US: Bower decompress-zip
CVE-2026-107708 (MIT krb5 through 1.22.2 contains a NULL pointer dereference
vulnerabil ...)
- krb5 <unfixed> (bug #1150461)
+ [trixie] - krb5 <no-dsa> (Minor issue)
NOTE: https://github.com/krb5/krb5/pull/1510
NOTE: Fixed by:
https://github.com/krb5/krb5/commit/f6e2c397ceda6467ebbaab8ed66d4895c9f1d6a7
(master)
NOTE: Fixed by:
https://github.com/krb5/krb5/commit/a88a18cafa1040a0c4f9c8d08288fc98831ec86d
(krb5-1.22 branch)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/da020086f099f02ef1f11069234afd9f7f9a2a63
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/da020086f099f02ef1f11069234afd9f7f9a2a63
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
