[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-40034
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Mon Aug 24 19:51:51 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
1a9047e7 by Salvatore Bonaccorso at 2026-08-24T20:41:25+02:00
Track fixed version for CVE-2026-40034
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -83953,7 +83953,7 @@ CVE-2026-40384 (An improper validation of the search parameter of the com_media
CVE-2026-40383 (An improper validation of user-supplied input leads to a local file in ...)
NOT-FOR-US: Joomla
CVE-2026-40034 (gix-submodule before 0.29.0 (gitoxide before 0.5.21, gix before 0.84.0 ...)
- - rust-gix-submodule <unfixed>
+ - rust-gix-submodule 0.30.0-1
[trixie] - rust-gix-submodule <no-dsa> (Minor issue)
NOTE: https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-f26g-jm89-4g65
NOTE: Introduced with: https://github.com/GitoxideLabs/gitoxide/commit/6a2e6a436f76c8bbf2487f9967413a51356667a0
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1a9047e743148600644f1df2d64452e496ecbcb8
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1a9047e743148600644f1df2d64452e496ecbcb8
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260824/76effa44/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list