[Git][security-tracker-team/security-tracker][master] new jackson-dataformats-binary issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8170586f by Moritz Muehlenhoff at 2026-11-01T23:32:19+01:00
new jackson-dataformats-binary issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5666,7 +5666,9 @@ CVE-2026-104384 (Insufficiently Protected Credentials in tunnel gateway and prov
 CVE-2026-104383 (Improper Control of Generation of Code in Pigeon MFA service in EagleC ...)
 	NOT-FOR-US: EagleCloud
 CVE-2026-104016 (ProtobufParser parses length-prefixed protobuf string and bytes fields ...)
-	TODO: check
+	- jackson-dataformats-binary 2.22.4-1 (unimportant)
+	NOTE: https://github.com/FasterXML/jackson-dataformats-binary/security/advisories/GHSA-c2rq-mcfv-jw29
+	NOTE: protobuf not enabled in Debian package
 CVE-2026-103996 (The If-So Dynamic Content \u2013 Elementor & All Page Builders Persona ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-103995 (Response body and chunk parsing would handle non-hex or negative integ ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8170586f5562c98093a9f505c2200b9cc1a69239

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8170586f5562c98093a9f505c2200b9cc1a69239
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261101/68bfa8eb/attachment.htm>