[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-26958 via unstable

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Mar 20 20:09:32 GMT 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cdbc5a42 by Salvatore Bonaccorso at 2026-03-20T21:04:51+01:00
Track fixed version for CVE-2026-26958 via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -12359,7 +12359,7 @@ CVE-2026-26960 (node-tar is a full-featured Tar for Node.js. When using default
 CVE-2026-26959 (ADB Explorer is a fluent UI for ADB on Windows. Versions 0.9.26020 and ...)
 	NOT-FOR-US: ADB Explorer
 CVE-2026-26958 (filippo.io/edwards25519 is a Go library implementing the edwards25519  ...)
-	- golang-filippo-edwards25519 <unfixed> (bug #1128618)
+	- golang-filippo-edwards25519 1.2.0-1 (bug #1128618)
 	[trixie] - golang-filippo-edwards25519 <no-dsa> (Minor issue; MultiScalarMult is a rarely used advanced API)
 	[bookworm] - golang-filippo-edwards25519 <no-dsa> (Minor issue; MultiScalarMult is a rarely used advanced API)
 	NOTE: https://github.com/FiloSottile/edwards25519/security/advisories/GHSA-fw7p-63qq-7hpr



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cdbc5a423f5b745f294e9810a4feb5edb0d8eafc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cdbc5a423f5b745f294e9810a4feb5edb0d8eafc
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260320/2c47353d/attachment.htm>


More information about the debian-security-tracker-commits mailing list