[Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-9149: not yet fixed

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
95072736 by Salvatore Bonaccorso at 2026-05-21T23:00:02+02:00
Update status for CVE-2026-9149: not yet fixed

The upstream commit is not included in 0.7.37-1 by checking the
extracted source as well.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -354,7 +354,7 @@ CVE-2026-9150 (A flaw was found in libsolv. This stack-based buffer overflow vul
 	NOTE: https://github.com/openSUSE/libsolv/pull/616
 	NOTE: https://github.com/openSUSE/libsolv/commit/c5b5db52aebde00bdeacecf4d0569c217ab3187d
 CVE-2026-9149 (A flaw was found in libsolv. This heap buffer overflow vulnerability o ...)
-	- libsolv 0.7.37-1
+	- libsolv <unfixed>
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2460380
 	NOTE: https://github.com/openSUSE/libsolv/pull/617
 	NOTE: https://github.com/openSUSE/libsolv/commit/210386037c892a720972ad35a3d8f7073b4d763b



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/950727361a6c392826263da6baf0e8045baefffd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/950727361a6c392826263da6baf0e8045baefffd
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260521/641033ea/attachment.htm>