[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for expat issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c1aa7ec5 by Salvatore Bonaccorso at 2026-06-22T20:09:38+02:00
Add Debian bug reference for expat issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -62,43 +62,43 @@ CVE-2026-11745 (A vulnerability has been identified in centraldogma-server-mirro
 CVE-2026-10530 (The Pie Register  WordPress plugin before 3.8.4.10 does not use suffic ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-56412 (libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataS ...)
-	- expat <unfixed>
+	- expat <unfixed> (bug #1140557)
 	NOTE: https://github.com/libexpat/libexpat/pull/1278
 	NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/d19e834794060d18c061d94452c35d725393ea58
 CVE-2026-56411 (xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDe ...)
-	- expat <unfixed>
+	- expat <unfixed> (bug #1140557)
 	NOTE: https://github.com/libexpat/libexpat/pull/1263
 	NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/528a4e5017e1bd3b48b689fd0c131df940ae3ea5
 CVE-2026-56410 (xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSyste ...)
-	- expat <unfixed>
+	- expat <unfixed> (bug #1140557)
 	NOTE: https://github.com/libexpat/libexpat/pull/1252
 	NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/deeb97f7c88d17a16b0ea2521a13733abc283347
 	NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/cee20e91bf14dc7f6d2fc48f0d70d86b2dc3afea
 CVE-2026-56409 (xmlwf in libexpat before 2.8.2 has an integer overflow for the output  ...)
-	- expat <unfixed>
+	- expat <unfixed> (bug #1140557)
 	NOTE: https://github.com/libexpat/libexpat/pull/1259
 	NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/61f7cdda22546c4bee38dd2d3fa3d6e4aa64d33e
 CVE-2026-56408 (libexpat before 2.8.2 has an integer overflow in copyString.)
-	- expat <unfixed>
+	- expat <unfixed> (bug #1140557)
 	NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/16e2efd867ea8567ffa012210b52ef5918e20817
 CVE-2026-56407 (libexpat before 2.8.2 has an integer overflow in doProlog that is rela ...)
-	- expat <unfixed>
+	- expat <unfixed> (bug #1140557)
 	NOTE: https://github.com/libexpat/libexpat/pull/1262
 	NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/30c2fc179ce5d2b1b1bae30bbe0dfddeac894e13
 CVE-2026-56406 (libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer becau ...)
-	- expat <unfixed>
+	- expat <unfixed> (bug #1140557)
 	NOTE: https://github.com/libexpat/libexpat/pull/1255
 	NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/99d8454fdf900a6d00c2a52748e6c0eeb507574d
 CVE-2026-56405 (libexpat before 2.8.2 has an integer overflow in getAttributeId.)
-	- expat <unfixed>
+	- expat <unfixed> (bug #1140557)
 	NOTE: https://github.com/libexpat/libexpat/pull/1251
 	NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/2c6c42d33689f6b266a5267b639e03cde17e53c0
 CVE-2026-56404 (libexpat before 2.8.2 has an integer overflow in addBinding.)
-	- expat <unfixed>
+	- expat <unfixed> (bug #1140557)
 	NOTE: https://github.com/libexpat/libexpat/pull/1249
 	NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/babfc48090977cbf7be24b2c48f6053dca75c164
 CVE-2026-56403 (libexpat before 2.8.2 has an integer overflow in storeAtts.)
-	- expat <unfixed>
+	- expat <unfixed> (bug #1140557)
 	NOTE: https://github.com/libexpat/libexpat/pull/1232
 	NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/12dc6d8d3d65f79471a94d8565f6bf1cf245f648
 	NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/147c8f36d6277d5c6011c098370a8362aed47b15



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c1aa7ec5e1afd3b4a31f319c153f95ddbb6312f7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c1aa7ec5e1afd3b4a31f319c153f95ddbb6312f7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260622/4a522dfe/attachment-0001.htm>