[Git][security-tracker-team/security-tracker][master] Track fixed verion for glibc issues via unstable

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a55a96a8 by Salvatore Bonaccorso at 2026-10-03T16:35:34+02:00
Track fixed verion for glibc issues via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -6910,7 +6910,7 @@ CVE-2026-95391 (ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows den
 CVE-2026-97686 (Wind River VxWorks 7 prior to 26.09, specific system call arguments ca ...)
 	NOT-FOR-US: WindRiver
 CVE-2026-97399 (The strncasecmp function in the GNU C Library 2.24 and later optimized ...)
-	- glibc <unfixed> (bug #1149647)
+	- glibc 2.43-7 (bug #1149647)
 	[trixie] - glibc <no-dsa> (Minor issue)
 	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=34683
 	NOTE: https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0024
@@ -15484,12 +15484,12 @@ CVE-2025-14484 (The Image Buzz plugin for WordPress is vulnerable to unauthorize
 CVE-2026-95831 (Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contai ...)
 	NOT-FOR-US: Crypt::SelfCertificate Perl module
 CVE-2026-95818 (A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU ...)
-	- glibc <unfixed> (bug #1148728)
+	- glibc 2.43-7 (bug #1148728)
 	[trixie] - glibc <no-dsa> (Minor issue)
 	NOTE: https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0023
 	NOTE: Fixed by: https://sourceware.org/git/?p=glibc.git;a=commit;h=ed0c137b97eb940b4b64981e84ed806d3276edd9
 CVE-2026-86805 (A time-of-check to time-of-use (TOCTOU) race condition in the dynamic  ...)
-	- glibc <unfixed> (bug #1148727)
+	- glibc 2.43-7 (bug #1148727)
 	[trixie] - glibc <no-dsa> (Minor issue)
 	NOTE: https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0022
 	NOTE: Fixed by: https://sourceware.org/git/?p=glibc.git;a=commit;h=ed0c137b97eb940b4b64981e84ed806d3276edd9
@@ -32237,7 +32237,7 @@ CVE-2026-88914 (A flaw was found in GStreamer's gst-plugins-good isomp4 plugin.
 CVE-2026-89011 (isomorphic-git before 1.42.0 contains a prototype pollution vulnerabil ...)
 	NOT-FOR-US: isomorphic-git
 CVE-2026-89092 (The nscd service in the GNU C Library 2.3.4 onwards may crash due to a ...)
-	- glibc <unfixed> (bug #1147395)
+	- glibc 2.43-7 (bug #1147395)
 	[trixie] - glibc <no-dsa> (Minor issue)
 	[bookworm] - glibc <postponed> (Minor issue, performance degradation)
 	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=34624



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a55a96a84d50606967d6ef6b1fb6738a3ef54810

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a55a96a84d50606967d6ef6b1fb6738a3ef54810
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261003/892b03a1/attachment.htm>