[Git][security-tracker-team/security-tracker][master] two uriparser issues fixed in sid

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0d7b17b2 by Moritz Muehlenhoff at 2026-06-12T11:12:02+02:00
two uriparser issues fixed in sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -22957,14 +22957,14 @@ CVE-2026-44928 (In uriparser before 1.0.2, the function family EqualsUri can mis
 	[trixie] - uriparser <no-dsa> (Minor issue)
 	[bookworm] - uriparser <no-dsa> (Minor issue)
 	NOTE: https://github.com/uriparser/uriparser/pull/305
-	NOTE: Fixed by: https://github.com/uriparser/uriparser/commit/723717c713a01c08efed6b3ded9583d7819e3386
+	NOTE: Fixed by: https://github.com/uriparser/uriparser/commit/723717c713a01c08efed6b3ded9583d7819e3386 (uriparser-1.0.2)
 	NOTE: Test: https://github.com/uriparser/uriparser/commit/bd7f2e6c0c17dd78853f85107535391b4635a86d
 CVE-2026-44927 (In uriparser before 1.0.2, there is pointer difference truncation to i ...)
 	- uriparser <unfixed> (bug #1136088)
 	[trixie] - uriparser <no-dsa> (Minor issue)
 	[bookworm] - uriparser <no-dsa> (Minor issue)
 	NOTE: https://github.com/uriparser/uriparser/pull/304
-	NOTE: Fixed by (merge): https://github.com/uriparser/uriparser/commit/dd98b0fa4ea69084ede319174ef107a5260d1334
+	NOTE: Fixed by (merge): https://github.com/uriparser/uriparser/commit/dd98b0fa4ea69084ede319174ef107a5260d1334 (uriparser-1.0.2)
 CVE-2026-44500 (ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad versio ...)
 	NOT-FOR-US: ZEBRA
 CVE-2026-44499 (ZEBRA is a Zcash node written entirely in Rust. Prior to version 4.4.0 ...)
@@ -31788,7 +31788,7 @@ CVE-2026-7059 (A vulnerability was found in 666ghj MiroFish up to 0.1.2. This af
 CVE-2026-7058 (A vulnerability has been found in 666ghj MiroFish up to 0.1.2. The imp ...)
 	NOT-FOR-US: 666ghj MiroFish
 CVE-2026-42371 (uriparser before 1.0.1 has numeric truncation in text range comparison ...)
-	- uriparser <unfixed> (bug #1135109)
+	- uriparser 1.0.1+dfsg-1 (bug #1135109)
 	[trixie] - uriparser <no-dsa> (Minor issue)
 	[bookworm] - uriparser <no-dsa> (Minor issue)
 	NOTE: https://github.com/uriparser/uriparser/pull/298
@@ -95264,7 +95264,7 @@ CVE-2025-67901 (openrsync through 0.5.0, as used in OpenBSD through 7.8 and on o
 CVE-2025-67900 (NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF  ...)
 	NOT-FOR-US: NXLog Agent
 CVE-2025-67899 (uriparser through 0.9.9 allows unbounded recursion and stack consumpti ...)
-	- uriparser <unfixed> (bug #1123086)
+	- uriparser 1.0.1+dfsg-1 (bug #1123086)
 	[trixie] - uriparser <no-dsa> (Minor issue)
 	[bookworm] - uriparser <no-dsa> (Minor issue)
 	[bullseye] - uriparser <postponed> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0d7b17b2f88604bab0d1240f3a5e79452edbf840

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0d7b17b2f88604bab0d1240f3a5e79452edbf840
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260612/54e5a812/attachment.htm>