[Git][security-tracker-team/security-tracker][master] Add references for CVE-2026-108976 (incomplete fix for CVE-2026-79992)

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8cca953d by Salvatore Bonaccorso at 2026-10-12T21:00:50+02:00
Add references for CVE-2026-108976 (incomplete fix for CVE-2026-79992)

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -292,6 +292,7 @@ CVE-2026-108978 (Heap-based buffer overflow vulnerability in Samsung Opensource
 CVE-2026-108976 (GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command inje ...)
 	- emacs <not-affected> (Incomplete fix for for CVE-2026-79992 not applied)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/10/11/1
+	NOTE: Fixed by: https://cgit.git.savannah.gnu.org/cgit/emacs.git/commit/?id=044b0203267db3b7912325d076d79a79000afe75
 	NOTE: CVE exists for an incomplete fix for CVE-2026-79992
 CVE-2026-108963 (databasement before 1.8.2 allows remote code execution because it runs ...)
 	NOT-FOR-US: databasement
@@ -65865,6 +65866,7 @@ CVE-2026-79992 (A flaw was found in Emacs TRAMP. A local attacker could exploit
 	NOTE: Fixed by: https://cgit.git.savannah.gnu.org/cgit/emacs.git/commit/?id=f3e7104d05bdb8e32ba13bf75604108ad88536dc
 	NOTE: When fixing this issue make sure to make the fix complete to not open up CVE-2026-108976
 	NOTE: https://www.openwall.com/lists/oss-security/2026/10/11/1
+	NOTE: Fixed by: https://cgit.git.savannah.gnu.org/cgit/emacs.git/commit/?id=044b0203267db3b7912325d076d79a79000afe75
 CVE-2026-96269 (GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon openi ...)
 	{DSA-6468-1}
 	- emacs 1:30.2+1-11



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8cca953ddf682e0fa5b3323a97a188f63c92de57

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8cca953ddf682e0fa5b3323a97a188f63c92de57
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261012/75e6132c/attachment.htm>