[Git][security-tracker-team/security-tracker][master] new lua-nginx-dns issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
23b891a0 by Moritz Muehlenhoff at 2026-10-25T00:21:14+02:00
new lua-nginx-dns issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -16,7 +16,9 @@ CVE-2026-116014 (open62541 1.5.0 before 1.5.7 contains an integer overflow in UA
 	- open62541 <unfixed>
 	NOTE: https://github.com/open62541/open62541/commit/0cf4806768c493bc6ccffcd4419da24153b970ec (v1.5.7)
 CVE-2026-116013 (OpenResty lua-resty-dns before 0.24 contains an improper input validat ...)
-	TODO: check
+	- lua-nginx-dns <unfixed>
+	NOTE: https://github.com/openresty/lua-resty-dns/pull/83
+	NOTE: https://github.com/openresty/lua-resty-dns/commit/b68eaecbf7997ac71c08ba56032b1f45438bd758 (v0.24)
 CVE-2026-116012 (Ghidra before 12.2 contains a numeric truncation vulnerability in Pack ...)
 	- ghidra <itp> (bug #923851)
 CVE-2026-116011 (Crow before 1.3.4 contains an uncontrolled recursion vulnerability in  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/23b891a04430f162b90e40816d2c175f0945e6cd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/23b891a04430f162b90e40816d2c175f0945e6cd
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261024/3d0ea6b7/attachment.htm>