[Git][security-tracker-team/security-tracker][master] 3 commits: Track fixed version for netcdf-perallel issues

Tue Aug 4 19:00:30 BST 2026


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f3c12b18 by Salvatore Bonaccorso at 2026-08-04T19:56:57+02:00
Track fixed version for netcdf-perallel issues

- - - - -
17204e33 by Salvatore Bonaccorso at 2026-08-04T19:57:32+02:00
Cleanup note for  CVE-2026-67194

- - - - -
4bc5b32d by Salvatore Bonaccorso at 2026-08-04T19:59:43+02:00
Track fixed version for golang-golang-x-text addressed via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4326,7 +4326,6 @@ CVE-2026-67194 (Courier IMAP before 6.0.1 and Courier Mail Server before 2.0.2 a
 	[bookworm] - courier <postponed> (Minor issue; DoS; need authentificated user)
 	[bullseye] - courier <postponed> (Minor issue; DoS; need authentificated user)
 	NOTE: Fixed by: https://github.com/svarshavchik/courier-libs/commit/b5b5581aabea3efadf5e2944947ff0214aa3533e
-	NOTE: Need authentificated user
 CVE-2026-67193 (Xlight FTP Server before 3.9.5 contains an information disclosure vuln ...)
 	NOT-FOR-US: Xlight FTP Server
 CVE-2026-67192 (Xlight FTP Server before 3.9.5 contains a pre-authentication stack buf ...)
@@ -12088,7 +12087,7 @@ CVE-2026-59144 (Data::RingBuffer::Shared versions before 0.04 for Perl allow a s
 CVE-2026-59143 (Data::RoaringBitmap::Shared versions before 0.02 for Perl allow an out ...)
 	NOT-FOR-US: Data::RoaringBitmap::Shared Perl module
 CVE-2026-56852 (A norm.Iter can enter an infinite loop when handling input containing  ...)
-	- golang-golang-x-text <unfixed> (bug #1142674)
+	- golang-golang-x-text 0.40.0-1 (bug #1142674)
 	[bookworm] - golang-golang-x-text <postponed> (Limited support, minor issue; DoS only, reachable via norm.Iter with NFC/NFKC on unvalidated UTF-8)
 	[bullseye] - golang-golang-x-text <postponed> (Limited support, minor issue; DoS only, reachable via norm.Iter with NFC/NFKC on unvalidated UTF-8)
 	NOTE: https://github.com/golang/go/issues/80142
@@ -135461,7 +135460,7 @@ CVE-2025-14936 (NSF Unidata NetCDF-C Attribute Name Stack-based Buffer Overflow
 	[trixie] - netcdf <no-dsa> (Minor issue)
 	[bookworm] - netcdf <postponed> (Minor issue, revisit when fixed upstream)
 	[bullseye] - netcdf <postponed> (Minor issue, revisit when fixed upstream)
-	- netcdf-parallel <unfixed> (bug #1123961)
+	- netcdf-parallel 1:4.10.1-1 (bug #1123961)
 	[trixie] - netcdf-parallel <postponed> (Minor issue, revisit when fixed upstream)
 	[bookworm] - netcdf-parallel <postponed> (Minor issue, revisit when fixed upstream)
 	[bullseye] - netcdf-parallel <postponed> (Minor issue, revisit when fixed upstream)
@@ -135473,7 +135472,7 @@ CVE-2025-14935 (NSF Unidata NetCDF-C Dimension Name Heap-based Buffer Overflow R
 	[trixie] - netcdf <no-dsa> (Minor issue)
 	[bookworm] - netcdf <postponed> (Minor issue, revisit when fixed upstream)
 	[bullseye] - netcdf <postponed> (Minor issue, revisit when fixed upstream)
-	- netcdf-parallel <unfixed> (bug #1123961)
+	- netcdf-parallel 1:4.10.1-1 (bug #1123961)
 	[trixie] - netcdf-parallel <postponed> (Minor issue, revisit when fixed upstream)
 	[bookworm] - netcdf-parallel <postponed> (Minor issue, revisit when fixed upstream)
 	[bullseye] - netcdf-parallel <postponed> (Minor issue, revisit when fixed upstream)
@@ -135485,7 +135484,7 @@ CVE-2025-14934 (NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow R
 	[trixie] - netcdf <no-dsa> (Minor issue)
 	[bookworm] - netcdf <postponed> (Minor issue, revisit when fixed upstream)
 	[bullseye] - netcdf <postponed> (Minor issue, revisit when fixed upstream)
-	- netcdf-parallel <unfixed> (bug #1123961)
+	- netcdf-parallel 1:4.10.1-1 (bug #1123961)
 	[trixie] - netcdf-parallel <postponed> (Minor issue, revisit when fixed upstream)
 	[bookworm] - netcdf-parallel <postponed> (Minor issue, revisit when fixed upstream)
 	[bullseye] - netcdf-parallel <postponed> (Minor issue, revisit when fixed upstream)
@@ -135497,7 +135496,7 @@ CVE-2025-14933 (NSF Unidata NetCDF-C NC Variable Integer Overflow Remote Code Ex
 	[trixie] - netcdf <no-dsa> (Minor isuse)
 	[bookworm] - netcdf <postponed> (Minor issue, revisit when fixed upstream)
 	[bullseye] - netcdf <postponed> (Minor issue, revisit when fixed upstream)
-	- netcdf-parallel <unfixed> (bug #1123961)
+	- netcdf-parallel 1:4.10.1-1 (bug #1123961)
 	[trixie] - netcdf-parallel <postponed> (Minor issue, revisit when fixed upstream)
 	[bookworm] - netcdf-parallel <postponed> (Minor issue, revisit when fixed upstream)
 	[bullseye] - netcdf-parallel <postponed> (Minor issue, revisit when fixed upstream)
@@ -135509,7 +135508,7 @@ CVE-2025-14932 (NSF Unidata NetCDF-C Time Unit Stack-based Buffer Overflow Remot
 	[trixie] - netcdf <no-dsa> (Minor issue)
 	[bookworm] - netcdf <postponed> (Minor issue, revisit when fixed upstream)
 	[bullseye] - netcdf <postponed> (Minor issue, revisit when fixed upstream)
-	- netcdf-parallel <unfixed> (bug #1123961)
+	- netcdf-parallel 1:4.10.1-1 (bug #1123961)
 	[trixie] - netcdf-parallel <postponed> (Minor issue, revisit when fixed upstream)
 	[bookworm] - netcdf-parallel <postponed> (Minor issue, revisit when fixed upstream)
 	[bullseye] - netcdf-parallel <postponed> (Minor issue, revisit when fixed upstream)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/5409a58668aac65316a80071500f42fdc63ea5ef...4bc5b32d0bddbecafbd14c7170c8ad7db8480f56

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/5409a58668aac65316a80071500f42fdc63ea5ef...4bc5b32d0bddbecafbd14c7170c8ad7db8480f56
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260804/4f0f4681/attachment.htm>
