[Git][security-tracker-team/security-tracker][master] Correct source association for CVE-2026-95702

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d7e206dd by Salvatore Bonaccorso at 2026-10-09T21:31:02+02:00
Correct source association for CVE-2026-95702

gVisor is actually already in the archive since a while, and not a NFU.
It is packaged as golang-gvisor-gvisor.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -49,7 +49,10 @@ CVE-2026-96328 (Improper Neutralization of Special Elements used in an SQL Comma
 CVE-2026-96327 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-95702 (Use-after-free vulnerability in VFS in Google gVisor prior to release  ...)
-	NOT-FOR-US: gVisor
+	- golang-gvisor-gvisor <unfixed>
+	NOTE: Fixed by: https://github.com/google/gvisor/commit/90bc4fc36fe442257a06ba15df00371561c183ed (release-20260831.0)
+	NOTE: Fixed by: https://github.com/google/gvisor/commit/25c75149bc0eeaa6a3a49b9bbe3473588b2af6df (release-20260824.0)
+	NOTE: Fixed by: https://github.com/google/gvisor/commit/e4efb89c787ef15b09e68d561f1303380e1d5a77 (release-20260831.0)
 CVE-2026-95610 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-95609 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d7e206dd03a7e35642af32e04dc4111d179b0032

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d7e206dd03a7e35642af32e04dc4111d179b0032
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261009/2fa18c67/attachment.htm>