[Git][security-tracker-team/security-tracker][master] Track fixes for expat issues via unstable upload

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f791ee26 by Salvatore Bonaccorso at 2026-11-02T22:02:04+01:00
Track fixes for expat issues via unstable upload

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5782,7 +5782,7 @@ CVE-2026-118372 (LibreSSL ocspcheck through 4.4.0 contains a CRLF injection vuln
 CVE-2026-118371 (LibreSSL through 4.4.0 contains a CRLF injection vulnerability in the  ...)
 	- libressl <itp> (bug #754513)
 CVE-2026-118370 (libexpat through 2.9.0 contains a signed integer overflow vulnerabilit ...)
-	- expat <unfixed> (bug #1152337)
+	- expat 2.10.0-1 (bug #1152337)
 	NOTE: https://github.com/libexpat/libexpat/pull/1450
 CVE-2026-118359 (Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowe ...)
 	{DSA-6592-1 DLA-4878-1}
@@ -5971,7 +5971,7 @@ CVE-2026-118129 (A vulnerability was found in jeremyckahn Chitchatter up to f825
 CVE-2026-118128 (A vulnerability has been found in a2aproject a2a-js up to 1.1.0. Impac ...)
 	NOT-FOR-US: a2aproject a2a-js
 CVE-2026-117610 (libexpat through 2.9.0 contains a NULL pointer dereference vulnerabili ...)
-	- expat <unfixed> (bug #1152343)
+	- expat 2.10.0-1 (bug #1152343)
 	NOTE: https://github.com/libexpat/libexpat/pull/1444
 CVE-2026-117609 (rtl_433 through 25.12 contains a stack-based buffer overflow vulnerabi ...)
 	- rtl-433 <unfixed> (unimportant)
@@ -12616,7 +12616,7 @@ CVE-2026-115508 (Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular exp
 CVE-2026-115507 (Vikunja 2.2.0 before 2.7.1 contains an HTML injection vulnerability in ...)
 	NOT-FOR-US: Vikunja
 CVE-2026-115506 (libexpat through 2.9.0 contains a denial of service vulnerability beca ...)
-	- expat <unfixed> (bug #1151841)
+	- expat 2.10.0-1 (bug #1151841)
 	[trixie] - expat <no-dsa> (Minor issue)
 	NOTE: https://github.com/libexpat/libexpat/pull/1433
 CVE-2026-115505 (libsmb2 before 6.3 contains integer overflow vulnerabilities in the DC ...)
@@ -19098,7 +19098,7 @@ CVE-2026-113352 (uTox through 0.18.1 contains a path traversal vulnerability tha
 	NOTE: https://github.com/uTox/uTox/pull/1603
 	NOTE: Fixed by: https://github.com/uTox/uTox/commit/f037d1dce6028dee2be3a9859b09560de2f5e933
 CVE-2026-113351 (libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerabilit ...)
-	- expat <unfixed> (bug #1151840)
+	- expat 2.10.0-1 (bug #1151840)
 	[trixie] - expat <no-dsa> (Minor issue)
 	[bookworm] - expat <postponed> (Minor issue; can be fixed in next update)
 	NOTE: https://github.com/libexpat/libexpat/pull/1431



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f791ee26ab90bc0c4f1fb94947135f8b864851a1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f791ee26ab90bc0c4f1fb94947135f8b864851a1
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261102/bba6e4fb/attachment-0001.htm>