[Git][security-tracker-team/security-tracker][master] new rust-gix issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7d47a411 by Moritz Muehlenhoff at 2026-10-13T00:53:55+02:00
new rust-gix issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -189,13 +189,17 @@ CVE-2026-109353 (LibreNMS before 26.9.0 contains an SQL injection vulnerability
 CVE-2026-109352 (LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerab ...)
 	NOT-FOR-US: LibreNMS
 CVE-2026-109351 (Gitoxide gix-pack before 0.75.0 contains an uncontrolled memory alloca ...)
-	TODO: check
+	- rust-gix-pack <unfixed>
+	NOTE: https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-x862-c2wj-4mwr
 CVE-2026-109350 (Gitoxide gix-pack before 0.75.0 contains a denial of service vulnerabi ...)
-	TODO: check
+	- rust-gix-pack <unfixed>
+	NOTE: https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-mpf5-465h-mr53
 CVE-2026-109349 (gitoxide gix-pack before 0.75.0 contains a reachable assertion in Byte ...)
-	TODO: check
+	- rust-gix-pack <unfixed>
+	NOTE: https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-633h-mqjc-8rwg
 CVE-2026-109348 (Gitoxide gix-mailmap before 0.35.0 contains a denial of service vulner ...)
-	TODO: check
+	- rust-gix-mailmap <unfixed>
+	NOTE: https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-pmpw-wwcm-r8rc
 CVE-2026-109347 (Adminer before 6.1.1 contains a remote code execution vulnerability th ...)
 	TODO: check
 CVE-2026-109346 (better-auth from 1.3.8-beta.3 before 1.7.0-rc.3 contains a UI misrepre ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7d47a411ef3f78d775b21b3a842703ae54c6eb62

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7d47a411ef3f78d775b21b3a842703ae54c6eb62
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261012/5e19f3a0/attachment.htm>