[Git][security-tracker-team/security-tracker][master] No defintive fix merged yet for CVE-2026-8177

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3b582537 by Salvatore Bonaccorso at 2026-05-11T14:02:39+02:00
No defintive fix merged yet for CVE-2026-8177

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -62,7 +62,7 @@ CVE-2026-8177 (XML::LibXML versions through 2.0210 for Perl read out-of-bounds h
 	- libxml-libxml-perl <unfixed>
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/39920366/
 	NOTE: https://github.com/cpan-authors/XML-LibXML/issues/146
-	NOTE: Fixed by: https://github.com/cpan-authors/XML-LibXML/commit/15652bd905a6c9dda59a81b14d4766adbbae2ea8
+	NOTE: https://github.com/cpan-authors/XML-LibXML/pull/149
 CVE-2026-6433 (The Custom css-js-php WordPress plugin through 2.0.7 does not properly ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-45191 (Net::CIDR::Lite versions before 0.24 for Perl does not properly consid ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3b5825378fd20b1ed22719a6272b621017ec7d1b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3b5825378fd20b1ed22719a6272b621017ec7d1b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260511/c2389196/attachment.htm>