[Git][security-tracker-team/security-tracker][master] new golang-github-klauspost-compress issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a5104fd5 by Moritz Muehlenhoff at 2026-10-30T13:41:44+01:00
new golang-github-klauspost-compress issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -6525,7 +6525,9 @@ CVE-2026-116603 (A flaw has been found in SourceCodester Online Food Ordering Sy
 CVE-2026-116602 (A vulnerability was detected in SourceCodester Online Food Ordering Sy ...)
 	NOT-FOR-US: SourceCodester
 CVE-2026-116591 (compress provides various compression algorithms. Prior to 1.20.2, the ...)
-	TODO: check
+	- golang-github-klauspost-compress <unfixed>
+	NOTE: https://github.com/klauspost/compress/security/advisories/GHSA-fpmh-frq8-7rj8
+	NOTE: https://github.com/klauspost/compress/commit/7f5d8528720c895a6106f201719f87eb030a565d (v1.20.2)
 CVE-2026-116590 (snappy-java is a Java port of the snappy, a fast C++ compresser/decomp ...)
 	- snappy-java <unfixed>
 	NOTE: https://github.com/xerial/snappy-java/security/advisories/GHSA-xqrx-qh46-34m7



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a5104fd521bdd2e43ebf0cfac53de4a43c683018

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a5104fd521bdd2e43ebf0cfac53de4a43c683018
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261030/b769e3d1/attachment.htm>