[Git][security-tracker-team/security-tracker][master] 3 commits: Triage CVE-2026-112112 in bird2 for bookworm LTS.

[Chris Lamb (@lamby)]

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker


Commits:
80e538ff by Chris Lamb at 2026-10-24T14:17:06-07:00
Triage CVE-2026-112112 in bird2 for bookworm LTS.

- - - - -
acc87e0e by Chris Lamb at 2026-10-24T14:17:22-07:00
Triage CVE-2026-115504 in cfitsio for bookworm LTS.

- - - - -
64e8c266 by Chris Lamb at 2026-10-24T14:17:40-07:00
Triage CVE-2025-53628 in cpp-httplib for bookworm LTS.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1938,6 +1938,7 @@ CVE-2026-115505 (libsmb2 before 6.3 contains integer overflow vulnerabilities in
 CVE-2026-115504 (CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ...)
 	- cfitsio <unfixed>
 	[trixie] - cfitsio <no-dsa> (Minor issue)
+	[bookworm] - cfitsio <postponed> (Minor issue; can be fixed in next update)
 	NOTE: https://github.com/HEASARC/cfitsio/pull/184
 	NOTE: Fixed by: https://github.com/HEASARC/cfitsio/commit/579792e0f85bff0c6733ad5ebdf54c3b5c188686
 CVE-2026-115503 (Ghidra before 12.2 contains an improper handling of highly compressed  ...)
@@ -10029,6 +10030,7 @@ CVE-2026-112112 (An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet
 	[trixie] - bird3 <no-dsa> (Minor issue)
 	- bird2 <unfixed>
 	[trixie] - bird2 <no-dsa> (Minor issue)
+	[bookworm] - bird2 <postponed> (Minor issue; can be fixed in next update)
 	NOTE: Fixed by: https://gitlab.nic.cz/labs/bird/-/commit/7cf75587b6f38b87849fe192bf5dfd124b7702bc
 CVE-2026-112111 (The Bootstrap Shortcodes plugin for WordPress before 3.4.6 is vulnerab ...)
 	NOT-FOR-US: WordPress plugin
@@ -308479,6 +308481,7 @@ CVE-2025-53628 (cpp-httplib is a C++11 single-file header-only cross platform HT
 	[experimental] - cpp-httplib 0.25.0+ds-1
 	- cpp-httplib 0.25.0+ds-3 (bug #1109340)
 	[trixie] - cpp-httplib <no-dsa> (Minor issue)
+	[bookworm] - cpp-httplib <postponed> (Minor issue; can be fixed in next update)
 	NOTE: https://github.com/yhirose/cpp-httplib/security/advisories/GHSA-j6p8-779x-p5pw
 	NOTE: https://github.com/yhirose/cpp-httplib/commit/17ba303889b8d4d719be3879a70639ab653efb99 (v0.23.0)
 CVE-2025-53626 (pdfme is a TypeScript-based PDF generator and React-based UI. The expr ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/5c201df354d157540071262322ff470e25f06a1d...64e8c2664977b1b37205c9ce5e84d48c1a3a79d0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/5c201df354d157540071262322ff470e25f06a1d...64e8c2664977b1b37205c9ce5e84d48c1a3a79d0
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261024/e865ca3a/attachment-0001.htm>