Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
df1be16b by Salvatore Bonaccorso at 2026-10-25T20:21:51+01:00
Add Debian bug references for various issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -9476,11 +9476,11 @@ CVE-2023-42991
CVE-2023-42990
REJECTED
CVE-2026-71482
- - golang-github-containerd-stargz-snapshotter <unfixed>
+ - golang-github-containerd-stargz-snapshotter <unfixed> (bug #1152024)
[trixie] - golang-github-containerd-stargz-snapshotter <no-dsa> (Minor
issue)
NOTE:
https://github.com/containerd/stargz-snapshotter/security/advisories/GHSA-6q59-3mx3-jpgq
CVE-2026-77395
- - golang-github-containerd-stargz-snapshotter <unfixed>
+ - golang-github-containerd-stargz-snapshotter <unfixed> (bug #1152024)
[trixie] - golang-github-containerd-stargz-snapshotter <no-dsa> (Minor
issue)
NOTE:
https://github.com/containerd/stargz-snapshotter/security/advisories/GHSA-6j84-h5gg-w3gr
CVE-2026-108518 (DBI versions before 1.656 for Perl crash via type confusion
in dbi_pro ...)
@@ -16126,21 +16126,21 @@ CVE-2026-110762 (bbPress before 2.6.19 contains an
information disclosure vulner
CVE-2026-110761 (ILIAS before 9.24, 10.12, and 11.5 contains a PHP object
injection vul ...)
NOT-FOR-US: ILIAS
CVE-2026-110736 (Godot Engine through 4.7.2 has an out-of-bounds read in the
optimized ...)
- - godot <unfixed> (unimportant)
+ - godot <unfixed> (unimportant; bug #1152026)
- godot3 <unfixed> (unimportant)
NOTE: Not considered security issues by upstream
NOTE: https://github.com/godotengine/godot/issues/123608
NOTE: https://github.com/godotengine/godot/pull/124701
NOTE: Fixed by:
https://github.com/godotengine/godot/commit/a3019c809c022455028b373707ef1ee0c03561bf
CVE-2026-110735 (Godot Engine through 4.7.2 has a heap out-of-bounds write in
the binar ...)
- - godot <unfixed> (unimportant)
+ - godot <unfixed> (unimportant; bug #1152026)
- godot3 <unfixed> (unimportant)
NOTE: Not considered security issues by upstream
NOTE: https://github.com/godotengine/godot/issues/123608
NOTE: https://github.com/godotengine/godot/pull/124699
NOTE: Fixed by:
https://github.com/godotengine/godot/commit/c67e2529f63e76a6aaef48ba70168c62cfd00c51
CVE-2026-110734 (Godot Engine through 4.7.2 has a heap out-of-bounds write in
the Radia ...)
- - godot <unfixed> (unimportant)
+ - godot <unfixed> (unimportant; bug #1152026)
- godot3 <unfixed> (unimportant)
NOTE: Not considered security issues by upstream
NOTE: https://github.com/godotengine/godot/issues/123608
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/df1be16bb3c706b0542d17b44d98bf11b6c75968
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/df1be16bb3c706b0542d17b44d98bf11b6c75968
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
