[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2026-17510/LTS

[Bastien Roucariès (@rouca)]

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e3b7e672 by Bastien Roucariès at 2026-08-09T22:33:58+02:00
CVE-2026-17510/LTS

- - - - -
45d42a94 by Bastien Roucariès at 2026-08-09T22:37:44+02:00
add zip to dla-needed

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -157,6 +157,8 @@ CVE-2026-10595 (A path traversal vulnerability exists in parisneo/lollms version
 CVE-2026-17510 (Crypt::OpenSSL::PKCS12 versions before 1.98 for Perl allow a NULL poin ...)
 	- libcrypt-openssl-pkcs12-perl 1.98-1 (bug #1143970)
 	[trixie] - libcrypt-openssl-pkcs12-perl <no-dsa> (Minor issue)
+	[bookworm] - libcrypt-openssl-pkcs12-perl <postponed> (Minor issue)
+	[bullseye] - libcrypt-openssl-pkcs12-perl <postponed> (Minor issue)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/42524422/
 	NOTE: Fixed by: https://github.com/dsully/perl-crypt-openssl-pkcs12/commit/6cb282d8d8e8ded4859551cd2d3cfa7c6028ce48 (v1.98)
 CVE-2026-71958 (D-Link DWR-M961 devices with hardware version C1 and software version  ...)


=====================================
data/dla-needed.txt
=====================================
@@ -1011,3 +1011,6 @@ zabbix/bullseye
   NOTE: 20260328: Added by Front-Desk (Beuc)
   NOTE: 20260328: CVE-2026-23919->24 appear to be in supported scope (Beuc/front-desk)
 --
+zip
+  NOTE: 20260809: Added by Front-Desk. Track #1143866 (rouca)
+--



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/3d755541d7c1ecd126ef36af66ea8a8843b2870c...45d42a94384c4eafcd5e8ed39a9663b51bb5c5b0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/3d755541d7c1ecd126ef36af66ea8a8843b2870c...45d42a94384c4eafcd5e8ed39a9663b51bb5c5b0
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260809/3674d801/attachment-0001.htm>