[Git][security-tracker-team/security-tracker][master] 2 commits: lts: expat postponed in bookworm

[Utkarsh Gupta (@utkarsh)]

Utkarsh Gupta pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d1a9f349 by Utkarsh Gupta at 2026-10-02T00:45:12+05:30
lts: expat postponed in bookworm

- - - - -
66bd6f01 by Utkarsh Gupta at 2026-10-02T01:23:44+05:30
lts: redis postponed in bookworm

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -44053,6 +44053,7 @@ CVE-2026-82678 (A vulnerability was identified in diem-project diem up to 5.1.3.
 CVE-2026-82677 (A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is  ...)
 	- redict <unfixed>
 	- redis <unfixed>
+	[bookworm] - redis <postponed> (Minor issue; requires a loaded module)
 	- valkey 9.1.2-1 (bug #1146641)
 	NOTE: https://github.com/valkey-io/valkey/issues/4200
 	NOTE: https://github.com/valkey-io/valkey/pull/4211
@@ -44103,6 +44104,7 @@ CVE-2026-82659 (nodemailer before 9.0.1 fails to apply disableFileAccess and dis
 CVE-2026-82631 (A security flaw has been discovered in valkey-io valkey 9.1.0. The aff ...)
 	- redict <unfixed>
 	- redis <unfixed>
+	[bookworm] - redis <postponed> (Minor issue; requires a loaded module)
 	- valkey 9.1.2-1 (bug #1146641)
 	NOTE: https://github.com/valkey-io/valkey/issues/4198
 	NOTE: https://github.com/valkey-io/valkey/pull/4212
@@ -119436,6 +119438,7 @@ CVE-2026-6716
 CVE-2026-56132 (In libexpat before 2.8.2, there is a heap-based buffer overflow in doP ...)
 	{DSA-6404-1}
 	- expat 2.8.2-1 (bug #1140388)
+	[bookworm] - expat <postponed> (Minor issue; needs external parameter entity parsing)
 	NOTE: https://github.com/libexpat/libexpat/pull/1272
 CVE-2026-56131 (libexpat before 2.8.2 lacks handler call depth tracking for calls to X ...)
 	{DSA-6404-1 DLA-4765-1}



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/62db517a5535478eb844bf3b058cdd34e381be50...66bd6f015ec9e7a7e63b5b9124d2f82b3f25e990

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/62db517a5535478eb844bf3b058cdd34e381be50...66bd6f015ec9e7a7e63b5b9124d2f82b3f25e990
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261002/8c63578c/attachment.htm>