[Git][security-tracker-team/security-tracker][master] Track fixed version for krb5 issues
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue May 12 16:36:56 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
ab06bc73 by Salvatore Bonaccorso at 2026-05-12T17:36:32+02:00
Track fixed version for krb5 issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -9409,10 +9409,10 @@ CVE-2026-40970 (When configured to use an SSL bundle, Spring Boot's Elasticsearc
CVE-2026-40967 (In Spring AI, various FilterExpressionConverter implementations accept ...)
NOT-FOR-US: VMware
CVE-2026-40356 (In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underf ...)
- - krb5 <unfixed> (bug #1135317)
+ - krb5 1.22.1-2.1 (bug #1135317)
NOTE: https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f
CVE-2026-40355 (In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer de ...)
- - krb5 <unfixed> (bug #1135317)
+ - krb5 1.22.1-2.1 (bug #1135317)
NOTE: https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f
CVE-2026-3087 (If `shutil.unpack_archive()` is given a ZIP archive with an absolute W ...)
- python3.14 <not-affected> (Windows-specific)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ab06bc7370cb2cbf4913dec118051ec8b8934d60
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ab06bc7370cb2cbf4913dec118051ec8b8934d60
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260512/f534c0bd/attachment.htm>
More information about the debian-security-tracker-commits
mailing list