[Git][security-tracker-team/security-tracker][master] Remove ntoes from CVE-2026-4427 (duplicate of 2026-32286)

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
94943f03 by Salvatore Bonaccorso at 2026-03-30T14:48:47+02:00
Remove ntoes from CVE-2026-4427 (duplicate of 2026-32286)

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1152,9 +1152,8 @@ CVE-2026-32287 (Boolean XPath expressions that evaluate to true can cause an inf
 	NOTE: https://github.com/antchfx/xpath/issues/121
 	NOTE: Fixed by: https://github.com/antchfx/xpath/commit/afd4762cc342af56345a3fb4002a59281fcab494 (v1.3.6)
 CVE-2026-32286 (The DataRow.Decode function fails to properly validate field lengths.  ...)
-	- golang-github-jackc-pgproto3 2.3.3-2
+	- golang-github-jackc-pgproto3 2.3.3-2 (bug #1131327)
 	NOTE: https://github.com/jackc/pgx/issues/2507
-	NOTE: Overlapping and duplicate of CVE-2026-4427
 CVE-2026-32285 (The Delete function fails to properly validate offsets when processing ...)
 	- golang-github-buger-jsonparser 1.1.2-1
 	[bullseye] - golang-github-buger-jsonparser <postponed> (Limited support, minor issue, follow bookworm DSAs/point-releases)
@@ -6094,9 +6093,8 @@ CVE-2026-3842
 	- qemu 1:10.2.2+ds-1
 	[bullseye] - qemu <not-affected> (Synthetic Debugging introduced in v7.1.0)
 	NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/85af4e937016ed2f20122eb116597d1abb30c5c0 (v10.2.2)
-CVE-2026-4427 (A flaw was found in pgproto3. A malicious or compromised PostgreSQL se ...)
-	- golang-github-jackc-pgproto3 2.3.3-2 (bug #1131327)
-	NOTE: https://github.com/jackc/pgx/issues/2507
+CVE-2026-4427
+	REJECTED
 CVE-2026-4426 (A flaw was found in libarchive. An Undefined Behavior vulnerability ex ...)
 	- libarchive <unfixed> (bug #1131444)
 	NOTE: https://github.com/libarchive/libarchive/pull/2897



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/94943f03d64b8219b79c730dcc4f05db71ca7cef

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/94943f03d64b8219b79c730dcc4f05db71ca7cef
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260330/a16ad5cc/attachment.htm>