[Git][security-tracker-team/security-tracker][master] 2 commits: Reference pull request for two openbabel issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
da77600a by Salvatore Bonaccorso at 2026-03-02T09:46:47+01:00
Reference pull request for two openbabel issues

- - - - -
c9058d42 by Salvatore Bonaccorso at 2026-03-02T09:48:09+01:00
Add CVE-2026-3408/openbabel

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -11,7 +11,11 @@ CVE-2026-3410 (A weakness has been identified in itsourcecode Society Management
 CVE-2026-3409 (A security flaw has been discovered in eosphoros-ai db-gpt 0.7.5. Affe ...)
 	NOT-FOR-US: eosphoros-ai db-gpt
 CVE-2026-3408 (A vulnerability was identified in Open Babel up to 3.1.1. This impacts ...)
-	TODO: check
+	- openbabel <unfixed>
+	[trixie] - openbabel <no-dsa> (Minor issue)
+	[bookworm] - openbabel <no-dsa> (Minor issue)
+	NOTE: https://github.com/openbabel/openbabel/issues/2848
+	NOTE: https://github.com/openbabel/openbabel/pull/2862
 CVE-2026-3407 (A vulnerability was determined in YosysHQ yosys up to 0.62. This affec ...)
 	NOT-FOR-US: YosysHQ yosys
 CVE-2026-3406 (A vulnerability was found in projectworlds Online Art Gallery Shop 1.0 ...)
@@ -4399,12 +4403,14 @@ CVE-2026-2705 (A vulnerability was detected in Open Babel up to 3.1.1. The impac
 	[bookworm] - openbabel <no-dsa> (Minor issue)
 	[bullseye] - openbabel <postponed> (Minor issue)
 	NOTE: https://github.com/openbabel/openbabel/issues/2848
+	NOTE: https://github.com/openbabel/openbabel/pull/2862
 CVE-2026-2704 (A security vulnerability has been detected in Open Babel up to 3.1.1.  ...)
 	- openbabel <unfixed>
 	[trixie] - openbabel <no-dsa> (Minor issue)
 	[bookworm] - openbabel <no-dsa> (Minor issue)
 	[bullseye] - openbabel <postponed> (Minor issue)
 	NOTE: https://github.com/openbabel/openbabel/issues/2848
+	NOTE: https://github.com/openbabel/openbabel/pull/2862
 CVE-2026-2703 (A weakness has been identified in xlnt-community xlnt up to 1.6.1. Imp ...)
 	NOT-FOR-US: xlnt-community xlnt
 CVE-2026-2702 (A security flaw has been discovered in Beetel 777VR1 up to 01.00.09. T ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/9fbb2161b8d24886d46e05deb5c5c4ad4058b03a...c9058d42f643a0293e0dcca47e6ef7d6763831b6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/9fbb2161b8d24886d46e05deb5c5c4ad4058b03a...c9058d42f643a0293e0dcca47e6ef7d6763831b6
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260302/9dff0db6/attachment.htm>