[Git][security-tracker-team/security-tracker][master] mark two commonleague issues as no-dsa
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Fri Mar 27 20:15:43 GMT 2026
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
4e6f0a1e by Moritz Mühlenhoff at 2026-03-27T21:15:19+01:00
mark two commonleague issues as no-dsa
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3370,6 +3370,8 @@ CVE-2019-25620 (Tree Studio 2.17 contains a denial of service vulnerability that
NOT-FOR-US: Tree Studio
CVE-2026-33347 (league/commonmark is a PHP Markdown parser. From version 2.3.0 to befo ...)
- php-league-commonmark 2.8.2-1
+ [trixie] - php-league-commonmark <no-dsa> (Minor issue)
+ [bookworm] - php-league-commonmark <no-dsa> (Minor issue)
NOTE: https://github.com/thephpleague/commonmark/security/advisories/GHSA-hh8v-hgvp-g3f5
NOTE: Fixed by: https://github.com/thephpleague/commonmark/commit/59fb075d2101740c337c7216e3f32b36c204218b (2.8.2)
CVE-2026-33699
@@ -10189,6 +10191,8 @@ CVE-2026-30848 (Parse Server is an open source backend that can be deployed to a
NOT-FOR-US: Parse Server
CVE-2026-30838 (league/commonmark is a PHP Markdown parser. Prior to version 2.8.1, th ...)
- php-league-commonmark 2.8.1-1
+ [trixie] - php-league-commonmark <no-dsa> (Minor issue)
+ [bookworm] - php-league-commonmark <no-dsa> (Minor issue)
NOTE: https://github.com/thephpleague/commonmark/security/advisories/GHSA-4v6x-c7xx-hw9f
NOTE: Regression test: https://github.com/thephpleague/commonmark/commit/f6e74434dd1a91f195f80cb0184b746a4187272a (2.8.1)
NOTE: Fixed by: https://github.com/thephpleague/commonmark/commit/5c0c4c8fe5a31e8260be99e0afad7136a27c79e6 (2.8.1)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4e6f0a1ea0ea1c67754f2736cfd8823d28f2b4ba
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4e6f0a1ea0ea1c67754f2736cfd8823d28f2b4ba
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260327/ca439831/attachment.htm>
More information about the debian-security-tracker-commits
mailing list