[Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2026-50538

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ecade89f by Salvatore Bonaccorso at 2026-06-16T11:31:28+02:00
Track fixed version via unstable for CVE-2026-50538

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -10437,7 +10437,7 @@ CVE-2026-9334 (Cpanel::JSON::XS versions before 4.41 for Perl allow type confusi
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/40653179/
 	NOTE: Fixed by: https://github.com/rurban/Cpanel-JSON-XS/commit/11a7c550a0d8fac2f84414f24d5df9b2bfe346e2 (4.41)
 CVE-2026-50538 [Attacker-controlled heap out-of-bounds write in libvncclient Tight decoder]
-	- libvncserver <unfixed> (bug #1138253)
+	- libvncserver 0.9.15+dfsg-6 (bug #1138253)
 	[trixie] - libvncserver <no-dsa> (Minor issue)
 	NOTE: https://github.com/LibVNC/libvncserver/security/advisories/GHSA-v9pm-47h4-jcq8
 CVE-2026-9831 (A race condition in the shared Extreme Platform ONE IAM Gateway API-ke ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ecade89f02742553a9d20b3fda43f4e0ea4f8054

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ecade89f02742553a9d20b3fda43f4e0ea4f8054
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260616/57997256/attachment.htm>