[Git][security-tracker-team/security-tracker][master] Track fixed version for expat issue via unstable

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Aug 11 07:03:54 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
91649f8e by Salvatore Bonaccorso at 2026-08-11T07:58:53+02:00
Track fixed version for expat issue via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2171,7 +2171,7 @@ CVE-2026-XXXX [Neutron sub-resource APIs do not verify parent ownership]
 	NOTE: https://review.opendev.org/c/openstack/neutron/+/989624/
 	NOTE: https://review.opendev.org/c/openstack/neutron/+/991586
 CVE-2026-72522 (libexpat before 2.8.3 has an out-of-bounds read and resultant infinite ...)
-	- expat <unfixed> (bug #1144064)
+	- expat 2.8.3-1 (bug #1144064)
 	NOTE: https://github.com/libexpat/libexpat/pull/1296
 	NOTE: https://bugzilla.mozilla.org/show_bug.cgi?id=2053153
 CVE-2026-19389 (Multiple integer overflow and underflow vulnerabilities were found in  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/91649f8e6dbd4d056bd33c39c7c10ba9643c4d39

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/91649f8e6dbd4d056bd33c39c7c10ba9643c4d39
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260811/e9140b60/attachment.htm>


More information about the debian-security-tracker-commits mailing list