[Git][security-tracker-team/security-tracker][master] Update status for varnish issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b8077931 by Salvatore Bonaccorso at 2026-07-23T21:17:26+02:00
Update status for varnish issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -82275,7 +82275,8 @@ CVE-2026-3457 (Improper Neutralization of Input During Web Page Generation (XSS
 CVE-2026-3098 (The Smart Slider 3 plugin for WordPress is vulnerable to Arbitrary Fil ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-34475 (Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in ...)
-	- varnish <unfixed> (bug #1132231)
+	- vinyl-cache <not-affected> (Fixed before initial upload to Debian)
+	- varnish <removed> (bug #1132231)
 	[trixie] - varnish <no-dsa> (Minor issue; can be mitigated by VCL rule)
 	[bookworm] - varnish <no-dsa> (Minor issue; can be mitigated by VCL rule)
 	[bullseye] - varnish <postponed> (Minor issue; can be mitigated by VCL rule)
@@ -956359,7 +956360,7 @@ CVE-2009-4489 (header.c in Cherokee before 0.99.32 writes data to a log file wit
 	- cherokee 0.99.37-1 (unimportant)
 	NOTE: The actual issue is within the broken terminal emulators and needs to be fixed there, see CVE-2009-4487
 CVE-2009-4488 (Varnish 2.0.6 writes data to a log file without sanitizing non-printab ...)
-	- varnish <unfixed> (unimportant)
+	- varnish <removed> (unimportant)
 	NOTE: The actual issue is within the broken terminal emulators and needs to be fixed there, see CVE-2009-4487
 CVE-2009-4487 (nginx 0.7.64 writes data to a log file without sanitizing non-printabl ...)
 	- nginx <unfixed> (unimportant)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b807793192307730315abbbb11fc88a60b9d25c0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b807793192307730315abbbb11fc88a60b9d25c0
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260723/d954c6e0/attachment.htm>