[Git][security-tracker-team/security-tracker][master] Add CVE-2026-44927/uriparser

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
52420a23 by Salvatore Bonaccorso at 2026-05-08T21:30:49+02:00
Add CVE-2026-44927/uriparser

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -26,7 +26,9 @@ CVE-2026-44928 (In uriparser before 1.0.2, the function family EqualsUri can mis
 	NOTE: Fixed by: https://github.com/uriparser/uriparser/commit/723717c713a01c08efed6b3ded9583d7819e3386
 	NOTE: Test: https://github.com/uriparser/uriparser/commit/bd7f2e6c0c17dd78853f85107535391b4635a86d
 CVE-2026-44927 (In uriparser before 1.0.2, there is pointer difference truncation to i ...)
-	TODO: check
+	- uriparser <unfixed>
+	NOTE: https://github.com/uriparser/uriparser/pull/304
+	NOTE: Fixed by (merge): https://github.com/uriparser/uriparser/commit/dd98b0fa4ea69084ede319174ef107a5260d1334
 CVE-2026-44500 (ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad versio ...)
 	NOT-FOR-US: ZEBRA
 CVE-2026-44499 (ZEBRA is a Zcash node written entirely in Rust. Prior to version 4.4.0 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/52420a23c9c1f21ccbc6c088c78766b9e46408cd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/52420a23c9c1f21ccbc6c088c78766b9e46408cd
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260508/5ba20505/attachment.htm>