[Git][security-tracker-team/security-tracker][master] 2 commits: Triage CVE-2025-71405, CVE-2026-72815, CVE-2026-72816 & CVE-2025-71405 in...

[Chris Lamb (@lamby)]

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b9109e5e by Chris Lamb at 2026-08-22T10:58:40-07:00
Triage CVE-2025-71405, CVE-2026-72815, CVE-2026-72816 & CVE-2025-71405 in golang-github-go-chi-chi for bookworm LTS.

- - - - -
efac818a by Chris Lamb at 2026-08-22T10:59:15-07:00
Triage CVE-2026-72817, CVE-2026-72815, CVE-2026-72816 & CVE-2025-71405 in golang-github-go-chi-chi for bookworm LTS.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -12998,14 +12998,20 @@ CVE-2026-72819 (Grav CMS before 2.0.13 contains a remote code execution vulnerab
 CVE-2026-72817 (go-chi/chi versions 0.9.0 before 5.3.0 contains an IP spoofing vulnera ...)
 	- golang-github-go-chi-chi 5.3.0-1
 	[trixie] - golang-github-go-chi-chi <no-dsa> (Minor issue)
+	[bookworm] - golang-github-go-chi-chi <ignored> (Minor issue; out of LTS support)
+	[bullseye] - golang-github-go-chi-chi <ignored> (Minor issue; out of LTS support)
 	NOTE: https://github.com/go-chi/chi/security/advisories/GHSA-9g5q-2w5x-hmxf
 CVE-2026-72816 (go-chi/chi through 5.2.1 contains an IP spoofing vulnerability in the  ...)
 	- golang-github-go-chi-chi 5.3.0-1
 	[trixie] - golang-github-go-chi-chi <no-dsa> (Minor issue)
+	[bookworm] - golang-github-go-chi-chi <ignored> (Minor issue; out of LTS support)
+	[bullseye] - golang-github-go-chi-chi <ignored> (Minor issue; out of LTS support)
 	NOTE: https://github.com/go-chi/chi/security/advisories/GHSA-rjr7-jggh-pgcp
 CVE-2026-72815 (go-chi chi versions >= 5.2.1 and before 5.3.0 contain an IP spoofing v ...)
 	- golang-github-go-chi-chi 5.3.0-1
 	[trixie] - golang-github-go-chi-chi <no-dsa> (Minor issue)
+	[bookworm] - golang-github-go-chi-chi <ignored> (Minor issue; out of LTS support)
+	[bullseye] - golang-github-go-chi-chi <ignored> (Minor issue; out of LTS support)
 	NOTE: https://github.com/go-chi/chi/security/advisories/GHSA-3fxj-6jh8-hvhx
 CVE-2026-72814 (The actix-files crate (actix_files) before version 0.6.10 contains an  ...)
 	- rust-actix-files <not-affected> (Fixed with initial upload to Debian)
@@ -13190,6 +13196,8 @@ CVE-2025-7639 (The vulnerability, if exploited, could allow an authenticated mis
 	NOT-FOR-US: AVEVA
 CVE-2025-71405 (chi versions before v5.2.2 contain an open redirect vulnerability in t ...)
 	- golang-github-go-chi-chi 5.2.3-1
+	[bookworm] - golang-github-go-chi-chi <ignored> (Minor issue; out of LTS support)
+	[bullseye] - golang-github-go-chi-chi <ignored> (Minor issue; out of LTS support)
 	NOTE: https://github.com/go-chi/chi/security/advisories/GHSA-vrw8-fxc6-2r93
 CVE-2023-7347
 	REJECTED



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/f49fa811a1fc81d772cdce885792cf09e2a05633...efac818aab1d5d6a0d7a667fd9f73e54e86cf492

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/f49fa811a1fc81d772cdce885792cf09e2a05633...efac818aab1d5d6a0d7a667fd9f73e54e86cf492
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260822/78d8ae37/attachment.htm>