[Git][security-tracker-team/security-tracker][master] CVE-2026-6238,CVE-2026-5928,CVE-2026-5450,CVE-2026-5435/glibc: bullseye postponed

[Arnaud Rebillout (@arnaudr)]

Arnaud Rebillout pushed to branch master at Debian Security Tracker / security-tracker


Commits:
dcd29787 by Arnaud Rebillout at 2026-05-27T17:28:05+07:00
CVE-2026-6238,CVE-2026-5928,CVE-2026-5450,CVE-2026-5435/glibc: bullseye postponed

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -17017,6 +17017,7 @@ CVE-2026-6238 (The deprecated functions ns_printrrf, ns_printrr and fp_nquery in
 	- glibc <unfixed> (bug #1135231)
 	[trixie] - glibc <no-dsa> (Minor issue)
 	[bookworm] - glibc <no-dsa> (Minor issue)
+	[bullseye] - glibc <postponed> (Minor issue, debugging functions)
 	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=34069
 	NOTE: https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0012
 CVE-2026-5944 (An improper access control vulnerability exists in the Cisco Intersigh ...)
@@ -17033,6 +17034,7 @@ CVE-2026-5435 (The deprecated functions ns_printrrf, ns_printrr and fp_nquery in
 	- glibc <unfixed> (bug #1135230)
 	[trixie] - glibc <no-dsa> (Minor issue)
 	[bookworm] - glibc <no-dsa> (Minor issue)
+	[bullseye] - glibc <postponed> (Minor issue, debugging functions)
 	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=34033
 	NOTE: https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0011
 CVE-2026-4911 (The Booking Package plugin for WordPress is vulnerable to Price Manipu ...)
@@ -22094,13 +22096,17 @@ CVE-2026-5450 (Calling the scanf family of functions with a %mc (malloc'd charac
 	- glibc <unfixed> (bug #1134543)
 	[trixie] - glibc <no-dsa> (Minor issue)
 	[bookworm] - glibc <no-dsa> (Minor issue)
+	[bullseye] - glibc <postponed> (Minor issue)
 	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=34008
 	NOTE: https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0009
 	NOTE: Fixed by: https://sourceware.org/git/?p=glibc.git;a=commit;h=839898777226a3ed88c0859f25ffe712519b4ead
+	NOTE: "%mc is not really usable unless bug 12701 is fixed as well" cf.
+	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=34008#c2
 CVE-2026-5928 (Calling the ungetwc function on a FILE stream with wide characters enc ...)
 	- glibc <unfixed> (bug #1134544)
 	[trixie] - glibc <no-dsa> (Minor issue)
 	[bookworm] - glibc <no-dsa> (Minor issue)
+	[bullseye] - glibc <postponed> (Minor issue)
 	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=33998
 	NOTE: https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0010
 	NOTE: Fixed by: https://sourceware.org/git/?p=glibc.git;a=commit;h=ef3bfb5f910011f3780cb06aa47e730035f53285



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dcd2978783c2deabe7d82dab128694e76874d27e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dcd2978783c2deabe7d82dab128694e76874d27e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260527/eaafcc62/attachment.htm>