[Git][security-tracker-team/security-tracker][master] Mark CVE-2026-49835 as no-dsa
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri Jul 24 07:14:12 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
efe305d8 by Salvatore Bonaccorso at 2026-07-24T08:13:41+02:00
Mark CVE-2026-49835 as no-dsa
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -8112,6 +8112,7 @@ CVE-2026-50185 (RustCrypto CMOV provides conditional move CPU intrinsics which a
NOTE: Fixed by: https://github.com/RustCrypto/utils/commit/dba6c355c9f241e3726d5ec2a68f9f3b519f6063 (cmov-v0.5.4)
CVE-2026-49835 (Sigstore Timestamp Authority is a service for issuing RFC 3161 timesta ...)
- golang-github-sigstore-timestamp-authority 2.1.0-1
+ [trixie] - golang-github-sigstore-timestamp-authority <no-dsa> (Minor issue)
NOTE: https://github.com/sigstore/timestamp-authority/security/advisories/GHSA-9c54-x2g4-v92j
NOTE: Fixed by: https://github.com/sigstore/timestamp-authority/commit/506ec57b6ac2ea1e4739322e47453469425b69b5 (v2.1.0)
CVE-2026-49216 (Symfony UX is a JavaScript ecosystem for Symfony. From 2.2.0 until 2.3 ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/efe305d8d511908e7bf6613a4d03853edf0e48b5
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/efe305d8d511908e7bf6613a4d03853edf0e48b5
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260724/17507be1/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list