[Git][security-tracker-team/security-tracker][master] zstd-jni-java fixed in sid
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Wed Oct 14 13:06:49 BST 2026
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
2a296e0f by Moritz Muehlenhoff at 2026-10-14T14:06:25+02:00
zstd-jni-java fixed in sid
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -43093,7 +43093,7 @@ CVE-2026-90855 (A weakness has been identified in SourceCodester/katojkalemba On
CVE-2026-90854 (A security flaw has been discovered in SourceCodester/katojkalemba Onl ...)
NOT-FOR-US: SourceCodester
CVE-2026-90852 (A vulnerability has been found in luben zstd-jni up to 1.5.7-13. This ...)
- - zstd-jni-java <unfixed> (bug #1148171)
+ - zstd-jni-java 1.5.7-23+ds-1 (bug #1148171)
[trixie] - zstd-jni-java <no-dsa> (Minor issue)
[bookworm] - zstd-jni-java <postponed> (Minor issue)
NOTE: https://github.com/luben/zstd-jni/issues/404
@@ -45126,7 +45126,7 @@ CVE-2026-79300 (SEP sesam before 5.2.0.24 mishandles User Authorization with MFA
CVE-2026-77773 (The Contact Form to Chat Apps | Click to Chat to Order WordPress plug ...)
NOT-FOR-US: WordPress plugin
CVE-2026-90560 (zstd-jni versions 1.2.0 through 1.5.7-13 contain an out-of-bounds read ...)
- - zstd-jni-java <unfixed> (bug #1148453)
+ - zstd-jni-java 1.5.7-23+ds-1 (bug #1148453)
[trixie] - zstd-jni-java <no-dsa> (Minor issue)
[bookworm] - zstd-jni-java <postponed> (Minor issue)
NOTE: https://github.com/luben/zstd-jni/issues/405
@@ -47986,13 +47986,13 @@ CVE-2026-8323 (URL redirection to untrusted site ('open redirect') vulnerability
CVE-2026-89049 (A server-side request forgery issue due to improper validation of equi ...)
NOT-FOR-US: Amazon
CVE-2026-89046 (zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds re ...)
- - zstd-jni-java <unfixed> (bug #1147397)
+ - zstd-jni-java 1.5.7-23+ds-1 (bug #1147397)
[trixie] - zstd-jni-java <no-dsa> (Minor issue)
[bookworm] - zstd-jni-java <postponed> (Minor issue)
NOTE: https://github.com/luben/zstd-jni/security/advisories/GHSA-rm53-6wf5-f34m
NOTE: Fixed by: https://github.com/luben/zstd-jni/commit/dd08685ef913a32e76fb27f43470035c06758646 (v1.5.7-14)
CVE-2026-89045 (zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative l ...)
- - zstd-jni-java <unfixed> (bug #1147397)
+ - zstd-jni-java 1.5.7-23+ds-1 (bug #1147397)
[trixie] - zstd-jni-java <no-dsa> (Minor issue)
[bookworm] - zstd-jni-java <postponed> (Minor issue)
NOTE: https://github.com/luben/zstd-jni/security/advisories/GHSA-9jx2-gfp9-phfm
@@ -48831,7 +48831,7 @@ CVE-2026-87928 (MaxSite CMS versions 0.94 through 109.6 contain a cross-site scr
CVE-2026-87927 (MaxSite CMS through 109.6 contains a local file inclusion vulnerabilit ...)
NOT-FOR-US: MaxSite CMS
CVE-2026-87877 (zstd-jni versions before 1.5.7-14 fail to validate closed state in set ...)
- - zstd-jni-java <unfixed> (bug #1147397)
+ - zstd-jni-java 1.5.7-23+ds-1 (bug #1147397)
[trixie] - zstd-jni-java <no-dsa> (Minor issue)
[bookworm] - zstd-jni-java <postponed> (Minor issue)
NOTE: https://github.com/luben/zstd-jni/security/advisories/GHSA-2jw3-mg7f-vw4q
@@ -48864,20 +48864,20 @@ CVE-2026-87853 (A flaw was found in SSSD's IdP authentication provider. The eval
CVE-2026-87827 (Certain KGUARD DVR devices running vulnerable firmware expose a system ...)
NOT-FOR-US: KGUARD DVR devices
CVE-2026-87825 (zstd-jni before 1.5.7-14 contains a use-after-free vulnerability where ...)
- - zstd-jni-java <unfixed> (bug #1147397)
+ - zstd-jni-java 1.5.7-23+ds-1 (bug #1147397)
[trixie] - zstd-jni-java <no-dsa> (Minor issue)
[bookworm] - zstd-jni-java <postponed> (Minor issue)
NOTE: https://github.com/luben/zstd-jni/security/advisories/GHSA-947w-pxjj-c7m9
NOTE: Fixed by: https://github.com/luben/zstd-jni/commit/393d7311766abbc285b149302c0fe1f94b16d555 (v1.5.7-14)
NOTE: Fixed by: https://github.com/luben/zstd-jni/commit/a560131d7834598afd9cea6b7c107bc88e915936 (v1.5.7-14)
CVE-2026-87824 (zstd-jni before 1.5.7-14 fails to validate the samples buffer capacity ...)
- - zstd-jni-java <unfixed> (bug #1147397)
+ - zstd-jni-java 1.5.7-23+ds-1 (bug #1147397)
[trixie] - zstd-jni-java <no-dsa> (Minor issue)
[bookworm] - zstd-jni-java <postponed> (Minor issue)
NOTE: https://github.com/luben/zstd-jni/security/advisories/GHSA-257p-3h6w-pg7h
NOTE: Fixed by: https://github.com/luben/zstd-jni/commit/bba6cfca2c0897f1fa004f4193247479f10da853 (v1.5.7-14)
CVE-2026-87823 (zstd-jni before 1.5.7-14 performs 32-bit signed bounds checks on three ...)
- - zstd-jni-java <unfixed> (bug #1147397)
+ - zstd-jni-java 1.5.7-23+ds-1 (bug #1147397)
[trixie] - zstd-jni-java <no-dsa> (Minor issue)
[bookworm] - zstd-jni-java <postponed> (Minor issue)
NOTE: https://github.com/luben/zstd-jni/security/advisories/GHSA-jfr6-9xqw-2g2q
@@ -48924,7 +48924,7 @@ CVE-2026-87807 (siyuan versions before v3.8.2 contain an authenticated SQL injec
CVE-2026-87806 (Parse Server versions <= 8.6.87 and >= 9.0.0 < 9.10.1-alpha.7 contain ...)
NOT-FOR-US: Parse Server
CVE-2026-87795 (zstd-jni versions before 1.5.7-14 fail to validate offset and length p ...)
- - zstd-jni-java <unfixed> (bug #1147397)
+ - zstd-jni-java 1.5.7-23+ds-1 (bug #1147397)
[trixie] - zstd-jni-java <no-dsa> (Minor issue)
[bookworm] - zstd-jni-java <postponed> (Minor issue)
NOTE: https://github.com/luben/zstd-jni/security/advisories/GHSA-ff36-7w3w-g8rm
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2a296e0f35fbd0986cc6932489b0f1efc79cde0f
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2a296e0f35fbd0986cc6932489b0f1efc79cde0f
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261014/c786189f/attachment.htm>
More information about the debian-security-tracker-commits
mailing list