[Git][security-tracker-team/security-tracker][master] Add two golang-github-containerd-stargz-snapshotter issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0da2b4e4 by Salvatore Bonaccorso at 2026-10-20T09:21:17+02:00
Add two golang-github-containerd-stargz-snapshotter issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -516,6 +516,12 @@ CVE-2023-42991
 	REJECTED
 CVE-2023-42990
 	REJECTED
+CVE-2026-71482
+	- golang-github-containerd-stargz-snapshotter <unfixed>
+	NOTE: https://github.com/containerd/stargz-snapshotter/security/advisories/GHSA-6q59-3mx3-jpgq
+CVE-2026-77395
+	- golang-github-containerd-stargz-snapshotter <unfixed>
+	NOTE: https://github.com/containerd/stargz-snapshotter/security/advisories/GHSA-6j84-h5gg-w3gr
 CVE-2026-108518
 	- libdbi-perl <unfixed>
 	NOTE: Fixed by: https://github.com/perl5-dbi/dbi/commit/c2ff4df575d7af625bb4d0d1ef7539f90b22d8b2 (1.656)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0da2b4e4764c9b46f85bd6aaa7ec5f7b1c5ce2b6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0da2b4e4764c9b46f85bd6aaa7ec5f7b1c5ce2b6
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261020/dd6fa749/attachment-0001.htm>