[Git][security-tracker-team/security-tracker][master] Reserve DLA-4715-1 for kissfft

[Thorsten Alteholz (@alteholz)]

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ff7da5e5 by Thorsten Alteholz at 2026-08-02T13:52:26+02:00
Reserve DLA-4715-1 for kissfft

- - - - -


2 changed files:

- data/CVE/list
- data/DLA/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -79333,7 +79333,6 @@ CVE-2026-41445 (KissFFT before commit8a8e66e contains an integer overflow vulner
 	- kissfft 131.1.0-4.1 (bug #1134493)
 	[trixie] - kissfft 131.1.0-4.1~deb13u1
 	[bookworm] - kissfft 131.1.0-4.1~deb12u1
-	[bullseye] - kissfft <no-dsa> (Minor issue)
 	NOTE: Fixed by: https://github.com/mborgerding/kissfft/commit/8a8e66e33d692bad1376fe7904d87d767730537f
 CVE-2026-41389 (OpenClaw versions 2026.4.7 before 2026.4.15 fail to enforce local-root ...)
 	NOT-FOR-US: OpenClaw
@@ -145312,7 +145311,6 @@ CVE-2025-34297 (KissFFT versions prior to the fix commit 1b083165 contain an int
 	- kissfft 131.1.0-4.1 (bug #1131147)
 	[trixie] - kissfft 131.1.0-4.1~deb13u1
 	[bookworm] - kissfft 131.1.0-4.1~deb12u1
-	[bullseye] - kissfft <postponed> (Minor issue)
 	NOTE: https://github.com/mborgerding/kissfft/issues/120
 	NOTE: Fixed by: https://github.com/mborgerding/kissfft/commit/1b08316582049c3716154caefc0deab8758506e3
 CVE-2025-2879 (Exposure of Sensitive Information to an Unauthorized Actor vulnerabili ...)


=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[02 Aug 2026] DLA-4715-1 kissfft - security update
+	{CVE-2025-34297 CVE-2026-41445}
+	[bullseye] - kissfft 131.1.0-1+deb11u1
 [01 Aug 2026] DLA-4714-1 libmodbus - security update
 	{CVE-2024-10918}
 	[bookworm] - libmodbus 3.1.6-2.1+deb12u1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ff7da5e516050e09f005bc4d00c8c815e227c596

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ff7da5e516050e09f005bc4d00c8c815e227c596
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260802/f78955bd/attachment.htm>