[Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-8484/jansi

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0ff2691b by Salvatore Bonaccorso at 2026-07-29T15:16:35+02:00
Update status for CVE-2026-8484/jansi

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -35844,15 +35844,13 @@ CVE-2026-8484 (A heap buffer overflow vulnerability exists in the Jansi JNI "ioc
 	[trixie] - jansi <no-dsa> (Minor issue)
 	[bookworm] - jansi <postponed> (Minor issue)
 	[bullseye] - jansi <not-affected> (jansi 1.x ships no native code; the vulnerable JNI ioctl is in jansi-native)
-	- jansi1 <unfixed>
-	[trixie] - jansi1 <no-dsa> (Minor issue)
-	[bookworm] - jansi1 <not-affected> (jansi1 1.18 ships no native code; the vulnerable JNI ioctl is in jansi-native)
+	- jansi1 <not-affected> (Vulnerable code for JNI ioctl() in src:jansi-native)
 	- jansi-native <unfixed>
 	[trixie] - jansi-native <no-dsa> (Minor issue)
 	[bookworm] - jansi-native <postponed> (Minor issue)
 	[bullseye] - jansi-native <postponed> (Minor issue)
 	NOTE: https://cert.pl/en/posts/2026/06/CVE-2026-8484/
-	TODO: double-check source packages, as there is not much details from cert.pl post
+	NOTE: https://github.com/fusesource/jansi/issues/319
 CVE-2026-8444 (The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Inj ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-8442 (The WP Review Slider Pro plugin for WordPress is vulnerable to Arbitra ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0ff2691bd0a29e1b9e70cc8d1c649f7357656f06

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0ff2691bd0a29e1b9e70cc8d1c649f7357656f06
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260729/3802e403/attachment.htm>