[Git][security-tracker-team/security-tracker][master] Add new ack issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Jul 9 04:42:33 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a920ec02 by Salvatore Bonaccorso at 2026-07-09T05:42:13+02:00
Add new ack issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -279,11 +279,17 @@ CVE-2026-49945
 CVE-2026-49944
 	REJECTED
 CVE-2026-49147 (App::Ack versions through 3.10.0 for Perl print unsanitised terminal e ...)
-	TODO: check
+	- ack <unfixed>
+	NOTE: https://lists.security.metacpan.org/cve-announce/msg/41643446/
+	NOTE: Fixed by: https://github.com/beyondgrep/ack3/commit/45ff5fe77dbd96f7332f31943102291f878f30b8 (v3.10.0)
 CVE-2026-49146 (App::Ack versions before 3.10.0 for Perl allow memory exhaustion via a ...)
-	TODO: check
+	- ack <unfixed>
+	NOTE: https://lists.security.metacpan.org/cve-announce/msg/41643307/
+	NOTE: Fixed by: https://github.com/beyondgrep/ack3/commit/45ff5fe77dbd96f7332f31943102291f878f30b8 (v3.10.0)
 CVE-2026-49145 (App::Ack versions through 3.10.0 for Perl read arbitrary files via --f ...)
-	TODO: check
+	- ack <unfixed>
+	NOTE: https://lists.security.metacpan.org/cve-announce/msg/41643327/
+	NOTE: Fixed by: https://github.com/beyondgrep/ack3/commit/45ff5fe77dbd96f7332f31943102291f878f30b8 (v3.10.0)
 CVE-2026-44840 (Dgraph is an open source distributed GraphQL database. Prior to versio ...)
 	TODO: check
 CVE-2026-41122 (Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 r ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a920ec02ac8778b1fab53529ed2f675320b1c3ee

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a920ec02ac8778b1fab53529ed2f675320b1c3ee
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260709/b129886f/attachment.htm>


More information about the debian-security-tracker-commits mailing list