[Git][security-tracker-team/security-tracker][master] new jackson-dataformats-binary issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1012e7fe by Moritz Muehlenhoff at 2026-11-01T23:34:24+01:00
new jackson-dataformats-binary issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5568,7 +5568,9 @@ CVE-2026-111027 (The Welcart e-Commerce WordPress plugin before 2.12.6 does not
 CVE-2026-111021 (The \u0627\u0641\u0632\u0648\u0646\u0647 \u067e\u06cc\u0627\u0645\u06a ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-110747 (ProtobufParser._readStringKey() reads the length prefix of a protobuf  ...)
-	TODO: check
+	- jackson-dataformats-binary 2.22.4-1 (unimportant)
+	NOTE: https://github.com/FasterXML/jackson-dataformats-binary/security/advisories/GHSA-fv7v-rrmh-4qcv
+	NOTE: protobuf not enabled in Debian package
 CVE-2026-110691 (The WPOrLogin  WordPress plugin before 3.1.0 does not perform a capabi ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-110662 (The MxChat \u2013 AI Chatbot & Content Generation for WordPress plugin ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1012e7fef1918fe167552a39685fa460b2210923

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1012e7fef1918fe167552a39685fa460b2210923
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261101/179dd6bd/attachment.htm>