[Git][security-tracker-team/security-tracker][master] 2 commits: lts: xen postponed in bookworm

[Utkarsh Gupta (@utkarsh)]

Utkarsh Gupta pushed to branch master at Debian Security Tracker / security-tracker


Commits:
62e3bd9e by Utkarsh Gupta at 2026-10-05T02:50:13+05:30
lts: xen postponed in bookworm

- - - - -
ba4f61f3 by Utkarsh Gupta at 2026-10-05T02:53:22+05:30
lts: opensbi postponed in bookworm

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -36123,14 +36123,17 @@ CVE-2026-79605
 CVE-2026-79604
 	- xen <unfixed>
 	[trixie] - xen <postponed> (Minor issue, fix along with future DSA)
+	[bookworm] - xen <postponed> (Minor issue)
 	NOTE: https://xenbits.xen.org/xsa/advisory-512.html
 CVE-2026-79603 (x86 PV guests can free memory pages while still keeping a stale TLB en ...)
 	- xen <unfixed>
 	[trixie] - xen <postponed> (Minor issue, fix along with future DSA)
+	[bookworm] - xen <postponed> (Minor issue)
 	NOTE: https://xenbits.xen.org/xsa/advisory-511.html
 CVE-2026-79602 (A guest with a PCI device assigned that has at least a BAR on the IO p ...)
 	- xen <unfixed>
 	[trixie] - xen <postponed> (Minor issue, fix along with future DSA)
+	[bookworm] - xen <postponed> (Minor issue)
 	NOTE: https://xenbits.xen.org/xsa/advisory-510.html
 CVE-2026-79577 (An issue in the /cas/login component of sso-master v1.0.0 allows attac ...)
 	NOT-FOR-US: sso-master
@@ -37976,6 +37979,7 @@ CVE-2026-62645 (A vulnerability has been identified in Reyrolle 7SR5 (All versio
 CVE-2026-62437 (When guests are terminated, various pieces of cleanup need carrying ou ...)
 	- xen <unfixed>
 	[trixie] - xen <postponed> (Minor issue, fix along with future DSA)
+	[bookworm] - xen <postponed> (Minor issue)
 	NOTE: https://xenbits.xen.org/xsa/advisory-509.html
 CVE-2026-61517 (Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an OS command  ...)
 	NOT-FOR-US: Netis
@@ -86430,6 +86434,7 @@ CVE-2026-12001 (A hardcoded credential vulnerability exists in the firmware of m
 CVE-2025-63913 (An issue was discovered in OpenSBI 1.3 allowing attackers to cause a d ...)
 	- opensbi 1.7-1
 	[trixie] - opensbi <no-dsa> (Minor issue)
+	[bookworm] - opensbi <postponed> (Minor issue)
 	NOTE: https://github.com/luojia65/opensbi-pmu2-crash
 	NOTE: https://github.com/riscv-software-src/opensbi/commit/69a0f0245f39ea3af4685cab4cb2dda90acd17cd (v1.7)
 CVE-2026-64555 (In the Linux kernel, the following vulnerability has been resolved:  K ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/0d77df2977f556ef0923de28317fa8dcadff2b39...ba4f61f373713bcae6916a724ff3a63a9f10654c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/0d77df2977f556ef0923de28317fa8dcadff2b39...ba4f61f373713bcae6916a724ff3a63a9f10654c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261005/be587d56/attachment.htm>