[Git][security-tracker-team/security-tracker][master] Add assigned CVE-2026-48829 for gsasl
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sun May 24 06:52:26 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
0ead90b0 by Salvatore Bonaccorso at 2026-05-24T07:51:13+02:00
Add assigned CVE-2026-48829 for gsasl
- - - - -
2 changed files:
- data/CVE/list
- data/DSA/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4954,10 +4954,8 @@ CVE-2026-43480 (In the Linux kernel, the following vulnerability has been resolv
[trixie] - linux 6.12.85-1
[bookworm] - linux 6.1.170-1
NOTE: https://git.kernel.org/linus/53f3a900e9a383d47af7253076e19f510c5708d0 (7.0-rc4)
-CVE-2026-XXXX [NULL pointer dereference in DIGEST-MD5]
+CVE-2026-48829 [NULL pointer dereference in DIGEST-MD5]
- gsasl 2.2.3-1
- [trixie] - gsasl 2.2.2-1.1+deb13u1
- [bookworm] - gsasl 2.2.0-1+deb12u1
NOTE: https://lists.gnu.org/archive/html/help-gsasl/2026-05/msg00002.html
NOTE: Fixed by: https://codeberg.org/gsasl/gsasl/commit/da9b5ae2962b014879e4a406c3b38f25aa70e97a (v2.2.3)
CVE-2026-XXXX [RUSTSEC-2026-0122]
=====================================
data/DSA/list
=====================================
@@ -86,6 +86,7 @@
{CVE-2025-23085 CVE-2025-23166 CVE-2025-55131 CVE-2025-59465 CVE-2025-59466 CVE-2026-21710 CVE-2026-21713 CVE-2026-21714}
[bookworm] - nodejs 18.20.4+dfsg-1~deb12u2
[14 May 2026] DSA-6271-1 gsasl - security update
+ {CVE-2026-48829}
[bookworm] - gsasl 2.2.0-1+deb12u1
[trixie] - gsasl 2.2.2-1.1+deb13u1
[14 May 2026] DSA-6270-1 postgresql-17 - security update
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0ead90b01df6af6b396c334bc120d450eed68c17
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0ead90b01df6af6b396c334bc120d450eed68c17
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260524/145162d9/attachment.htm>
More information about the debian-security-tracker-commits
mailing list