[Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-61477

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
299d6f0d by Salvatore Bonaccorso at 2026-08-08T10:45:22+02:00
Update status for CVE-2026-61477

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1083,9 +1083,11 @@ CVE-2026-61478
 	- libvirt 12.6.0-1
 	NOTE: Fixed by: https://gitlab.com/libvirt/libvirt/-/commit/68da70aae766c6271b8d3b466374d3cc7d1a8afb (v12.6.0-rc1)
 CVE-2026-61477 (An injection vulnerability was found in libvirt's virtual network driv ...)
-	- libvirt <unfixed>
-	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2512068
-	TODO: wait and update entry once RH has updated records, reference upstream issue
+	- libvirt 12.6.0-1
+	NOTE: Fixed by: https://gitlab.com/libvirt/libvirt/-/commit/d44836a1dc6771ac22f69755fc69bf730f0eec87 (v12.6.0-rc1)
+	NOTE: Fixed by: https://gitlab.com/libvirt/libvirt/-/commit/289ffa796d737a79a4c05d07232ebd75def9a12a (v12.6.0-rc1)
+	NOTE: Fixed by: https://gitlab.com/libvirt/libvirt/-/commit/cb8974b923e3c40cde96f0c7bceaa638f7f9c72b (v12.6.0-rc1)
+	NOTE: Fixed by: https://gitlab.com/libvirt/libvirt/-/commit/3cfc77963b512d809348fca07f97fe924fac9a05 (v12.6.0-rc1)
 CVE-2026-8166 (Improper neutralization of input during web page generation ('cross-si ...)
 	NOT-FOR-US: e-Logo Purchasing Portal
 CVE-2026-70646 (aiosend is a synchronous and asynchronous Crypto Pay API client. Pror  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/299d6f0d762ce90b19589b1d5c7ce0bcc54db8af

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/299d6f0d762ce90b19589b1d5c7ce0bcc54db8af
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260808/c7cf1c0b/attachment-0001.htm>