Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
65693778 by Salvatore Bonaccorso at 2026-10-10T18:03:38+02:00
Track fixed version for CVE-2026-105712/gnupg2 via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -6130,7 +6130,7 @@ CVE-2026-19184 (The NXP GAU ADC driver
(drivers/adc/adc_mcux_gau_adc.c) validate
CVE-2026-12171 (auto-changelog before 2.6.1 merges configuration from inside
the targe ...)
NOT-FOR-US: auto-changelog
CVE-2026-105712 (gpgtar in GnuPG before 2.5.19 can allow file overwrite via
crafted dat ...)
- - gnupg2 <unfixed> (bug #1150168)
+ - gnupg2 2.4.9-8 (bug #1150168)
[trixie] - gnupg2 <no-dsa> (Minor issue)
[bookworm] - gnupg2 <postponed> (Minor issue)
NOTE: https://static.dev.gnupg.org/T8159.html
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6569377821081163f9b321bfaa4294e0e2dc0f7d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6569377821081163f9b321bfaa4294e0e2dc0f7d
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
