[Git][security-tracker-team/security-tracker][master] Add two new ostree issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c63ac49f by Salvatore Bonaccorso at 2026-08-11T13:02:26+02:00
Add two new ostree issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,9 @@
+CVE-2026-XXXX [GHSA-xppc-j946-vcj7: buffer overflow on 32-bit systems]
+	- ostree 2026.3-1 (bug #1144106)
+	NOTE: https://github.com/ostreedev/ostree/security/advisories/GHSA-xppc-j946-vcj7
+CVE-2026-XXXX [GHSA-7cgc-gp99-6jmm: resource exhaustion via LZMA decoding]
+	- ostree 2026.3-1 (bug #1144105)
+	NOTE: https://github.com/ostreedev/ostree/security/advisories/GHSA-7cgc-gp99-6jmm
 CVE-2026-8917 (Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Su ...)
 	NOT-FOR-US: ASUS
 CVE-2026-8718 (tls_opt_dtls_peer_connection_id_value_get() in subsys/net/lib/sockets/ ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c63ac49f613d2eb0bfb63d6c3d94839dd09f09a3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c63ac49f613d2eb0bfb63d6c3d94839dd09f09a3
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260811/5ae06919/attachment.htm>