[Git][security-tracker-team/security-tracker][master] Correct one commit reference for xz-utils issue

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Oct 6 14:14:02 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7734323a by Salvatore Bonaccorso at 2026-10-06T15:12:36+02:00
Correct one commit reference for xz-utils issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -35539,7 +35539,7 @@ CVE-2026-XXXX [GHSA-5qpq-xqfv-j9pg: Invalid write if a decoder is reinitialized
 	[bookworm] - xz-utils 5.4.1-1+deb12u2
 	NOTE: https://tukaani.org/xz/invalid-write-after-reinit.html
 	NOTE: https://github.com/tukaani-project/xz/security/advisories/GHSA-5qpq-xqfv-j9pg
-	NOTE: Fixed by: https://github.com/tukaani-project/xz/commit/9fc6f5cd8774ebef8d4e030f7081fb6984c0dc3f (v5.8.4)
+	NOTE: Fixed by: https://github.com/tukaani-project/xz/commit/c6e3aadbb510e44cecfe870408ecfea1d1ca792c (v5.8.4)
 	NOTE: Fixed by: https://github.com/tukaani-project/xz/commit/fe4d763d566a38ad61d4c5022520c25578a3a464 (v5.8.4)
 	NOTE: Fixed by: https://github.com/tukaani-project/xz/commit/e5e63d50eac1b4357a5a7a0abd3c5f99a5c47881 (v5.8.4)
 	NOTE: Fixed by: https://github.com/tukaani-project/xz/commit/c3b290c3dc536d16884a6c695618eb08fdbc700a (v5.8.4)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7734323aaeb970c2086053c0eb22ed7319627bbb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7734323aaeb970c2086053c0eb22ed7319627bbb
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261006/c3d54bec/attachment.htm>


More information about the debian-security-tracker-commits mailing list