[Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c5abd2da by Salvatore Bonaccorso at 2026-10-17T09:18:15+02:00
Add Debian bug references for various issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -145,35 +145,35 @@ CVE-2026-102608 (ZoneMinder is a free, open source closed-circuit television sof
 CVE-2026-102607 (ZoneMinder is a free, open source closed-circuit television software a ...)
 	TODO: check
 CVE-2026-110759 (Text::CSV_XS versions before 1.65 for Perl return a 0xFF byte that is  ...)
-	- libtext-csv-xs-perl <unfixed>
+	- libtext-csv-xs-perl <unfixed> (bug #1151096)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/44408696/
 	NOTE: Fixed by: https://github.com/cpan-authors/Text-CSV_XS/commit/7627f1a2bb8ffe4e81d9847318a060822043f7f3 (1.65)
 CVE-2026-110758 (Text::CSV_XS versions before 1.65 for Perl read before the start of an ...)
-	- libtext-csv-xs-perl <unfixed>
+	- libtext-csv-xs-perl <unfixed> (bug #1151096)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/44408695/
 	NOTE: Fixed by: https://github.com/cpan-authors/Text-CSV_XS/commit/efed7ee21177c59a5b69e787f84154e1fcb0d095 (1.65)
 CVE-2026-110757 (Text::CSV_XS versions before 1.65 for Perl allow record splitting by w ...)
-	- libtext-csv-xs-perl <unfixed>
+	- libtext-csv-xs-perl <unfixed> (bug #1151096)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/44408694/
 	NOTE: Fixed by: https://github.com/cpan-authors/Text-CSV_XS/commit/fcfb796cb50de9cef8b94a70535304ac41a50c56 (1.65)
 CVE-2026-110756 (Text::CSV_XS versions before 1.65 for Perl drop the end of a record an ...)
-	- libtext-csv-xs-perl <unfixed>
+	- libtext-csv-xs-perl <unfixed> (bug #1151096)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/44408690/
 	NOTE: Fixed by: https://github.com/cpan-authors/Text-CSV_XS/commit/0610a8d81262ae6f1ac82a88d73c8a471f38af19 (1.65)
 CVE-2026-110755 (Text::CSV_XS versions before 1.65 for Perl allow quadratic CPU use by  ...)
-	- libtext-csv-xs-perl <unfixed>
+	- libtext-csv-xs-perl <unfixed> (bug #1151096)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/44408689/
 	NOTE: Fixed by: https://github.com/cpan-authors/Text-CSV_XS/commit/f25e00aacd6fc15857b22487cb2e5ca263f377e0 (1.65)
 CVE-2026-110754 (Text::CSV_XS versions before 1.65 for Perl leak the parsed fields of a ...)
-	- libtext-csv-xs-perl <unfixed>
+	- libtext-csv-xs-perl <unfixed> (bug #1151096)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/44408685/
 	NOTE: Fixed by: https://github.com/cpan-authors/Text-CSV_XS/commit/eb4f739ffc605bfb1ab710e5330704faa0e89f08 (1.65)
 CVE-2026-110752 (Text::CSV_XS versions before 1.65 for Perl allow memory exhaustion by  ...)
-	- libtext-csv-xs-perl <unfixed>
+	- libtext-csv-xs-perl <unfixed> (bug #1151096)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/44408679/
 	NOTE: Fixed by: https://github.com/cpan-authors/Text-CSV_XS/commit/d9d3d66f9ff6a8a1bc255a6ef05100f9b102b92b (1.65)
 CVE-2026-110753 (Text::CSV_XS versions from 1.46 before 1.65 for Perl have a use-after- ...)
-	- libtext-csv-xs-perl <unfixed>
+	- libtext-csv-xs-perl <unfixed> (bug #1151096)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/44408682/
 	NOTE: Fixed by: https://github.com/cpan-authors/Text-CSV_XS/commit/f082d5c8aab1b8d16b6181d4f3042a06947e260f (1.65)
 CVE-2026-97858 (An attacker can cause the server to unbind the target device from its  ...)
@@ -7647,7 +7647,7 @@ CVE-2026-95630 (Adobe Commerce is affected by an Improper Input Validation vulne
 CVE-2026-95502 (A Git server that Grafana's Git Sync (provisioning) is configured to u ...)
 	NOT-FOR-US: Grafana
 CVE-2026-95127 (An issue in libass v.0.17.5 allows a remote attacker to cause a denial ...)
-	- libass <unfixed>
+	- libass <unfixed> (bug #1151095)
 	NOTE: https://github.com/libass/libass/issues/947
 	NOTE: https://github.com/libass/libass/pull/955
 CVE-2026-95124 (Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c5abd2daa4541dad1e95550446b240f39e971358

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c5abd2daa4541dad1e95550446b240f39e971358
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261017/52ba396e/attachment-0001.htm>