[Git][security-tracker-team/security-tracker][master] Add two new bison issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
290dc8fb by Salvatore Bonaccorso at 2026-07-29T23:00:58+02:00
Add two new bison issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -233,9 +233,13 @@ CVE-2026-57834 (Apache Traffic Server allows request smuggling if chunked messag
 	- trafficserver <unfixed>
 	NOTE: https://lists.apache.org/thread/5prl9glcm9g2swnq9hqxvnokylm1gr6d
 CVE-2026-56390 (GNU Bison improperly handles grammar\u2011defined output paths. Gramma ...)
-	TODO: check
+	- bison <unfixed>
+	NOTE: https://cert.pl/en/posts/2026/07/CVE-2026-56389/
+	NOTE: https://cgit.git.savannah.gnu.org/cgit/bison.git/commit/?id=8d101c19d4d9aaedf83a448c925513742d4efcf0
 CVE-2026-56389 (GNU Bison allows for an execution of an arbitrary program during HTML  ...)
-	TODO: check
+	- bison <unfixed>
+	NOTE: https://cert.pl/en/posts/2026/07/CVE-2026-56389
+	NOTE: https://cgit.git.savannah.gnu.org/cgit/bison.git/commit/?id=3169c1e7a2c6acc4c59dfcf8b089896d6881925b
 CVE-2026-55995 (A Double Free vulnerability in open-iscsi allows anunauthenticatedMITM ...)
 	TODO: check
 CVE-2026-54735 (Prebid Server is an open-source solution for running real-time adverti ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/290dc8fb0866e49c48b00b6a5b2d8ec713549d08

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/290dc8fb0866e49c48b00b6a5b2d8ec713549d08
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260729/e84f5d5b/attachment.htm>