[Git][security-tracker-team/security-tracker][master] Better reference for discussion around zlib affected range
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sun Oct 4 13:56:59 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
977720d1 by Salvatore Bonaccorso at 2026-10-04T13:52:17+02:00
Better reference for discussion around zlib affected range
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -41472,9 +41472,10 @@ CVE-2026-85091 (zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overfl
NOTE: https://github.com/madler/zlib/issues/1310
NOTE: https://github.com/madler/zlib/pull/1317
NOTE: Fixed by: https://github.com/madler/zlib/commit/df84af25dc1942490e1d1c899a07619152a46148
- NOTE: Discussion on affected range: https://github.com/madler/zlib/issues/1292#issuecomment-5562455575
+ NOTE: Discussion on affected range: https://github.com/madler/zlib/issues/1310#issuecomment-5979623265
NOTE: Support non-blocking devices in the gz* routines introduced with:
NOTE: https://github.com/madler/zlib/commit/81cc0bebedd935daeb81b0b6e475d8786b51af3d (v1.3.1.2)
+
CVE-2026-91947 (FreeRDP server versions before 3.31.0 contain a use-after-free vulnera ...)
- freerdp3 3.31.0+dfsg-1
- freerdp2 <removed>
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/977720d1d03e2875385a373296fafa906ecb447c
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/977720d1d03e2875385a373296fafa906ecb447c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261004/ee2581d2/attachment.htm>
More information about the debian-security-tracker-commits
mailing list