[Git][security-tracker-team/security-tracker][master] 2 commits: lts: sshuttle postponed in bookworm

[Utkarsh Gupta (@utkarsh)]

Utkarsh Gupta pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8e443010 by Utkarsh Gupta at 2026-10-05T01:54:23+05:30
lts: sshuttle postponed in bookworm

- - - - -
ecec5f9f by Utkarsh Gupta at 2026-10-05T01:58:58+05:30
lts: node-uri-js postponed in bookworm

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2315,6 +2315,7 @@ CVE-2026-103530 (A vulnerability was detected in decolua 9Router up to 0.5.55. T
 CVE-2026-103387 (A weakness has been identified in garycourt uri-js up to 4.4.1. This a ...)
 	- node-uri-js <unfixed> (bug #1149972)
 	[trixie] - node-uri-js <no-dsa> (Minor issue)
+	[bookworm] - node-uri-js <postponed> (Minor issue)
 	NOTE: https://github.com/garycourt/uri-js/issues/103
 CVE-2026-103001 (PyJWT is a Python implementation of JSON Web Token standards. From 2.1 ...)
 	- pyjwt 2.14.0-1
@@ -5467,6 +5468,7 @@ CVE-2024-31026 (An issue in Greek Universities Network (GUnet) Open eClass Platf
 CVE-2026-XXXX [GHSA-5rfj-p5qw-w48g: Unauthenticated remote DoS via attacker-controlled reverse-DNS hostname in auto-hosts parsing]
 	- sshuttle 2.0.0-1
 	[trixie] - sshuttle <no-dsa> (Minor issue)
+	[bookworm] - sshuttle <postponed> (Minor issue; client DoS only, needs non-default --auto-hosts)
 	NOTE: https://github.com/sshuttle/sshuttle/security/advisories/GHSA-5rfj-p5qw-w48g
 	NOTE: Fixed by: https://github.com/sshuttle/sshuttle/commit/baea31a6769baeb52e8837ad6cc582017d74676c (v2.0.0)
 CVE-2026-102331 (Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/d5f422bfb315e025600e850d0a004590c65c7344...ecec5f9f92e621d4e506a65a03be35f415dffae1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/d5f422bfb315e025600e850d0a004590c65c7344...ecec5f9f92e621d4e506a65a03be35f415dffae1
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261005/b840bbf9/attachment.htm>