[Git][security-tracker-team/security-tracker][master] Add new issue in apache-arrow (CVE-2026-25087)

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
291e757b by Salvatore Bonaccorso at 2026-02-17T21:04:11+01:00
Add new issue in apache-arrow (CVE-2026-25087)

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,7 @@
+CVE-2026-25087 [Potential use-after-free when reading IPC file with pre-buffering]
+	- apache-arrow 23.0.1-1
+	NOTE: https://github.com/apache/arrow/pull/48925
+	NOTE: https://www.openwall.com/lists/oss-security/2026/02/17/4
 CVE-2026-24708
 	- nova 2:32.1.0-7 (bug #1128294)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/02/17/1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/291e757b7b7aa6dd8c10e4a7ddcb5c65a637fb2f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/291e757b7b7aa6dd8c10e4a7ddcb5c65a637fb2f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260217/9f7bad37/attachment.htm>