[Git][security-tracker-team/security-tracker][master] Add two new libtirpc issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
08a7528b by Salvatore Bonaccorso at 2026-10-17T11:04:01+02:00
Add two new libtirpc issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -258,7 +258,8 @@ CVE-2026-85985 (MariaDB server is a community developed fork of MySQL server. Fr
 	NOTE: https://jira.mariadb.org/browse/MDEV-40323
 	NOTE: Fixed by: https://github.com/MariaDB/server/commit/4f66ca1b69daf1b7e6a562ca8e86d77a6a70abfe (mariadb-13.1.1, mariadb-13.0.2, mariadb-12.3.3, mariadb-11.8.9, mariadb-11.4.13, mariadb-10.11.19, mariadb-10.6.28)
 CVE-2026-85977 (A flaw was found in libtirpc. A remote attacker can exploit this vulne ...)
-	TODO: check
+	- libtirpc <unfixed>
+	NOTE: Fixed by: http://git.linux-nfs.org/?p=steved/libtirpc.git;a=commit;h=ccc1acf867d88dc0bdbe58568f621607d44977f5 (libtirpc-1-3-8-rc2)
 CVE-2026-85748 (MariaDB server is a community developed fork of MySQL server. From 12. ...)
 	- mariadb <not-affected> (Vulnerable code not present)
 	NOTE: https://github.com/MariaDB/server/security/advisories/GHSA-mv8g-9f7q-hprm
@@ -275,7 +276,8 @@ CVE-2026-85745 (MariaDB server is a community developed fork of MySQL server. Fr
 	NOTE: https://jira.mariadb.org/browse/MDEV-40328
 	NOTE: Fixed by: https://github.com/MariaDB/server/commit/2bf355e361db85153fdfba7b8a0f0d114d6a26ce (mariadb-13.1.1, mariadb-13.0.2, mariadb-12.3.3, mariadb-11.8.9, mariadb-11.4.13, mariadb-10.11.19, mariadb-10.6.28)
 CVE-2026-85231 (A flaw was found in libtirpc. An authenticated remote attacker could e ...)
-	TODO: check
+	- libtirpc <unfixed>
+	NOTE: Fixed by: http://git.linux-nfs.org/?p=steved/libtirpc.git;a=commit;h=65d27459fe569a678cb5cc67d308bcf12c49cb40 (libtirpc-1-3-8-rc2)
 CVE-2026-81452 (Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, con ...)
 	NOT-FOR-US: Dell / EMC
 CVE-2026-80092 (Authentication bypass by assumed-immutable data in Microsoft Identity  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/08a7528b4f5d3f72c1c9973eeebbfc097d0d5b38

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/08a7528b4f5d3f72c1c9973eeebbfc097d0d5b38
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261017/ac58ac66/attachment.htm>