[Git][security-tracker-team/security-tracker][master] Mark bison issues as no-dsa
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Jul 29 22:12:59 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
365926c2 by Salvatore Bonaccorso at 2026-07-29T23:12:17+02:00
Mark bison issues as no-dsa
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -234,10 +234,12 @@ CVE-2026-57834 (Apache Traffic Server allows request smuggling if chunked messag
NOTE: https://lists.apache.org/thread/5prl9glcm9g2swnq9hqxvnokylm1gr6d
CVE-2026-56390 (GNU Bison improperly handles grammar\u2011defined output paths. Gramma ...)
- bison <unfixed>
+ [trixie] - bison <no-dsa> (Minor issue)
NOTE: https://cert.pl/en/posts/2026/07/CVE-2026-56389/
NOTE: https://cgit.git.savannah.gnu.org/cgit/bison.git/commit/?id=8d101c19d4d9aaedf83a448c925513742d4efcf0
CVE-2026-56389 (GNU Bison allows for an execution of an arbitrary program during HTML ...)
- bison <unfixed>
+ [trixie] - bison <no-dsa> (Minor issue)
NOTE: https://cert.pl/en/posts/2026/07/CVE-2026-56389
NOTE: https://cgit.git.savannah.gnu.org/cgit/bison.git/commit/?id=3169c1e7a2c6acc4c59dfcf8b089896d6881925b
CVE-2026-55995 (A Double Free vulnerability in open-iscsi allows anunauthenticatedMITM ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/365926c28a590e82f385a55d67665d31324337c3
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/365926c28a590e82f385a55d67665d31324337c3
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260729/b64f852d/attachment.htm>
More information about the debian-security-tracker-commits
mailing list