[Git][security-tracker-team/security-tracker][master] Add CVE-2026-104086/7zip

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5dba9d47 by Salvatore Bonaccorso at 2026-10-17T17:26:29+02:00
Add CVE-2026-104086/7zip

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3356,7 +3356,11 @@ CVE-2026-104141 (DataEase is an open source data visualization and analysis tool
 CVE-2026-104103 (Ludwig is a low-code framework for building custom LLMs, neural networ ...)
 	NOT-FOR-US: Ludwig
 CVE-2026-104086 (7-Zip before 26.03 contains an uninitialized memory disclosure vulnera ...)
-	TODO: check
+	- 7zip 26.03+dfsg-1
+	- p7zip 16.02+transitional.1
+	NOTE: Since p7zip/16.02+transitional.1 src:p7zip is only an empty source package
+	NOTE: depending on 7zip. Mark this version as fixed version.
+	NOTE: https://sourceforge.net/p/sevenzip/discussion/45797/thread/db6922e1d0/
 CVE-2026-103994 (A Heap-based Buffer Overflow vulnerability in theVXLAN Gateway Daemon( ...)
 	NOT-FOR-US: Juniper
 CVE-2026-103993 (An Out-of-bounds Write vulnerability in the routing protocol daemon (r ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5dba9d4735c2b41076de3b4838b346bdbd0bb5cb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5dba9d4735c2b41076de3b4838b346bdbd0bb5cb
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261017/f3733d96/attachment.htm>