[Git][security-tracker-team/security-tracker][master] Add commit references for xz-utils issue

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
80aa38b3 by Salvatore Bonaccorso at 2026-10-06T15:09:36+02:00
Add commit references for xz-utils issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -35539,6 +35539,10 @@ CVE-2026-XXXX [GHSA-5qpq-xqfv-j9pg: Invalid write if a decoder is reinitialized
 	[bookworm] - xz-utils 5.4.1-1+deb12u2
 	NOTE: https://tukaani.org/xz/invalid-write-after-reinit.html
 	NOTE: https://github.com/tukaani-project/xz/security/advisories/GHSA-5qpq-xqfv-j9pg
+	NOTE: Fixed by: https://github.com/tukaani-project/xz/commit/9fc6f5cd8774ebef8d4e030f7081fb6984c0dc3f (v5.8.4)
+	NOTE: Fixed by: https://github.com/tukaani-project/xz/commit/fe4d763d566a38ad61d4c5022520c25578a3a464 (v5.8.4)
+	NOTE: Fixed by: https://github.com/tukaani-project/xz/commit/e5e63d50eac1b4357a5a7a0abd3c5f99a5c47881 (v5.8.4)
+	NOTE: Fixed by: https://github.com/tukaani-project/xz/commit/c3b290c3dc536d16884a6c695618eb08fdbc700a (v5.8.4)
 CVE-2026-19816 (A flaw was found in PackageKit. PackageKit skips the polkit authorizat ...)
 	- packagekit 1.4.0-1 (unimportant)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2515940



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/80aa38b3f7867907ccb0dd29a2c60b3509bd9b67

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/80aa38b3f7867907ccb0dd29a2c60b3509bd9b67
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261006/b54758f8/attachment.htm>