[Git][security-tracker-team/security-tracker][master] Mark CVE-2026-109117 as no-dsa for trixie

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0e414ccb by Salvatore Bonaccorso at 2026-10-14T07:48:34+02:00
Mark CVE-2026-109117 as no-dsa for trixie

There should be not real practical real-life impact on applications
according to the maintainer and upstream as well, so mark it no-dsa.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,5 +1,6 @@
 CVE-2026-109117
 	- oath-toolkit 2.6.15-1
+	[trixie] - oath-toolkit <no-dsa> (Minor issue)
 	NOTE: https://oath-toolkit.codeberg.page/CVE-2026-109117.html
 	NOTE: Fixed by: https://codeberg.org/oath-toolkit/oath-toolkit/commit/5000be81a938a3bc01fb1a4636e89c19588ce7fb (v2.6.15)
 CVE-2026-XXXX [GHSA-48f2-29wv-5jgc: Exotic RainerScript replace() 32-bit output-length wrap causes a heap buffer overflow]



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0e414ccbb4c017a50b75974be857461e315bea35

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0e414ccbb4c017a50b75974be857461e315bea35
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261014/683ed6a6/attachment.htm>