[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2026-11331: add commits link

[Emmanuel Arias (@eamanu)]

Emmanuel Arias pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0d796885 by Emmanuel Arias at 2026-08-06T22:26:42-03:00
CVE-2026-11331: add commits link

- - - - -
a0136d39 by Emmanuel Arias at 2026-08-06T22:30:59-03:00
CVE-2026-10822: not-affected in bullseye, add commits links for bookworm

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -12228,11 +12228,23 @@ CVE-2026-10723 (BIND may accept incorrect child-zone NSEC3 records as valid, whi
 CVE-2026-10822 (If BIND encounters a particular invalid data structure in a DNS record ...)
 	{DSA-6395-1}
 	- bind9 1:9.20.26-1
+	[bullseye] - bind9 <not-affected> (Vulnerable code not present)
 	NOTE: https://kb.isc.org/docs/cve-2026-10822
+	NOTE: https://gitlab.isc.org/isc-projects/bind9/-/commit/d413c9ac2e29a728531354a69c8c8234c01b7d1e (9.18-branch)
+	NOTE: https://gitlab.isc.org/isc-projects/bind9/-/commit/a5f1a9d0d2ec021618924b14202ac96ead8299c1 (9.18-branch)
+	NOTE: https://gitlab.isc.org/isc-projects/bind9/-/commit/e73b70a64453e7d97a11cb5f0afe8bb02d34aaf8 (9.18-branch)
+	NOTE: https://gitlab.isc.org/isc-projects/bind9/-/commit/19ac8b8e46aeb0a15e217bc7bdf485b31b87d9b4 (9.18-branch)
+	NOTE: https://gitlab.isc.org/isc-projects/bind9/-/commit/8e066d3fc369e3346f22bb5cfb67a7ab08a74034 (9.18-branch)
 CVE-2026-11331 (An attacker who knows (or guesses) that a resolver uses RPZ with wildc ...)
 	{DSA-6395-1}
 	- bind9 1:9.20.26-1
 	NOTE: https://kb.isc.org/docs/cve-2026-11331
+	NOTE: https://gitlab.isc.org/isc-projects/bind9/-/commit/e1c83d27984f10ff929bc54d6ed84b5152be96d5 (9.16-branch)
+	NOTE: https://gitlab.isc.org/isc-projects/bind9/-/commit/25b572a6d00f717d7992f154f28b43d2b2ffd0b3 (9.16-branch)
+	NOTE: https://gitlab.isc.org/isc-projects/bind9/-/commit/ee2ac186bc5f75f7f3f7049f1a21e9a2014cee59 (9.16-branch)
+	NOTE: https://gitlab.isc.org/isc-projects/bind9/-/commit/adc8285d23e2eac6ec463f5dbc5a9596fdd36c60 (9.18-branch)
+	NOTE: https://gitlab.isc.org/isc-projects/bind9/-/commit/095b11f20f911f5b8059bdc349b256d6c64ece30 (9.18-branch)
+	NOTE: https://gitlab.isc.org/isc-projects/bind9/-/commit/dc328a199f96222e0c30cc20b7b795bfc2c9b2e4 (9.18-branch)
 CVE-2026-11605 (The issue is a resource exhaustion vulnerability associated with DNSSE ...)
 	{DSA-6395-1}
 	- bind9 1:9.20.26-1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/363088e982bc1d36863fc3fad9235938a044cc5e...a0136d39a21651098bfcaf6ad776624a3bb4b4a7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/363088e982bc1d36863fc3fad9235938a044cc5e...a0136d39a21651098bfcaf6ad776624a3bb4b4a7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260807/685bef0a/attachment-0001.htm>