[Git][security-tracker-team/security-tracker][master] Add GHSA id to temporary subject for c-ares issues
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sat Oct 31 14:28:21 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
3454d87e by Salvatore Bonaccorso at 2026-10-31T15:27:15+01:00
Add GHSA id to temporary subject for c-ares issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4157,55 +4157,55 @@ CVE-2026-116131 (HTTP::Body versions before 1.23_01 for Perl allow memory and te
- libhttp-body-perl 1.24.01-1 (bug #1152485)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44711949/
NOTE: Fixed by: https://github.com/libwww-perl/HTTP-Body/commit/47beca524a3062eacfd646664576f005fb4be19b (v1.24)
-CVE-2026-XXXX [Memory corruption when an application cancels its lookups after a connection failure]
+CVE-2026-XXXX [GHSA-wpr3-8q3r-4q8c: Memory corruption when an application cancels its lookups after a connection failure]
- c-ares 1.34.9-1
NOTE: https://github.com/c-ares/c-ares/security/advisories/GHSA-wpr3-8q3r-4q8c
NOTE: https://github.com/c-ares/c-ares/commit/7f408deb128fbdcce78122322734ffaa01cad9ae (v1.34.9)
NOTE: https://github.com/c-ares/c-ares/commit/f944c4718fd672c9c0befd65a340abb2ccfc1a31 (v1.34.9)
-CVE-2026-XXXX [A DNS reply that arrived from a different server than the one queried could be accepted]
+CVE-2026-XXXX [GHSA-fqh5-3x7m-wp44: A DNS reply that arrived from a different server than the one queried could be accepted]
- c-ares 1.34.9-1
NOTE: https://github.com/c-ares/c-ares/security/advisories/GHSA-fqh5-3x7m-wp44
NOTE: https://github.com/c-ares/c-ares/commit/c8bd9ab53329f66ec0c395a11002a5696669b147 (v1.34.9)
NOTE: https://github.com/c-ares/c-ares/commit/c7fa9ebcb0c0086730c53bf03191c03f03706246 (v1.34.9)
-CVE-2026-XXXX [Use-after-free of a lookup after shutting down a failed connection]
+CVE-2026-XXXX [GHSA-97vq-4mxv-7vhm: Use-after-free of a lookup after shutting down a failed connection]
- c-ares 1.34.9-1
NOTE: https://github.com/c-ares/c-ares/security/advisories/GHSA-97vq-4mxv-7vhm
NOTE: https://github.com/c-ares/c-ares/commit/7f408deb128fbdcce78122322734ffaa01cad9ae (v1.34.9)
NOTE: https://github.com/c-ares/c-ares/commit/f944c4718fd672c9c0befd65a340abb2ccfc1a31 (v1.34.9)
-CVE-2026-XXXX [Use-after-free when an application cancels lookups from a callback, or shuts a channel down]
+CVE-2026-XXXX [GHSA-rf6g-ww74-97qh: Use-after-free when an application cancels lookups from a callback, or shuts a channel down]
- c-ares 1.34.9-1
NOTE: https://github.com/c-ares/c-ares/security/advisories/GHSA-rf6g-ww74-97qh
NOTE: https://github.com/c-ares/c-ares/commit/7f408deb128fbdcce78122322734ffaa01cad9ae (v1.34.9)
NOTE: https://github.com/c-ares/c-ares/commit/f944c4718fd672c9c0befd65a340abb2ccfc1a31 (v1.34.9)
-CVE-2026-XXXX [Use-after-free of a connection after the socket-state callback returns]
+CVE-2026-XXXX [GHSA-mw23-pfg6-2x9r: Use-after-free of a connection after the socket-state callback returns]
- c-ares 1.34.9-1
NOTE: https://github.com/c-ares/c-ares/security/advisories/GHSA-mw23-pfg6-2x9r
NOTE: https://github.com/c-ares/c-ares/commit/7f408deb128fbdcce78122322734ffaa01cad9ae (v1.34.9)
NOTE: https://github.com/c-ares/c-ares/commit/f944c4718fd672c9c0befd65a340abb2ccfc1a31 (v1.34.9)
-CVE-2026-XXXX [Use-after-free when an application cancels lookups from a server-state callback]
+CVE-2026-XXXX [GHSA-v33j-65h4-4ch8: Use-after-free when an application cancels lookups from a server-state callback]
- c-ares 1.34.9-1
NOTE: https://github.com/c-ares/c-ares/security/advisories/GHSA-v33j-65h4-4ch8
NOTE: https://github.com/c-ares/c-ares/commit/7f408deb128fbdcce78122322734ffaa01cad9ae (v1.34.9)
NOTE: https://github.com/c-ares/c-ares/commit/f944c4718fd672c9c0befd65a340abb2ccfc1a31 (v1.34.9)
-CVE-2026-XXXX [Use-after-free of a server record when an application changes its DNS servers from a callback]
+CVE-2026-XXXX [GHSA-pj7p-v3cw-hq66: Use-after-free of a server record when an application changes its DNS servers from a callback]
- c-ares 1.34.9-1
NOTE: https://github.com/c-ares/c-ares/security/advisories/GHSA-pj7p-v3cw-hq66
NOTE: https://github.com/c-ares/c-ares/commit/7f408deb128fbdcce78122322734ffaa01cad9ae (v1.34.9)
NOTE: https://github.com/c-ares/c-ares/commit/f944c4718fd672c9c0befd65a340abb2ccfc1a31 (v1.34.9)
NOTE: https://github.com/c-ares/c-ares/commit/13a10dddbabc30b6fca8e23f9efff73fedba9401 (v1.34.9)
-CVE-2026-XXXX [Use-after-free of a cached DNS answer while the application is still reading it]
+CVE-2026-XXXX [GHSA-grv7-fq5q-9vfc: Use-after-free of a cached DNS answer while the application is still reading it]
- c-ares 1.34.9-1
NOTE: https://github.com/c-ares/c-ares/security/advisories/GHSA-grv7-fq5q-9vfc
NOTE: https://github.com/c-ares/c-ares/commit/a21160045f9d7039225fa285be7cb1b02173a3a5 (v1.34.9)
-CVE-2026-XXXX [Buffer overflow when ares_dup() or ares_save_options() runs while another thread changes the servers]
+CVE-2026-XXXX [GHSA-ph6c-3cvx-mq6v: Buffer overflow when ares_dup() or ares_save_options() runs while another thread changes the servers]
- c-ares 1.34.9-1
NOTE: https://github.com/c-ares/c-ares/security/advisories/GHSA-ph6c-3cvx-mq6v
NOTE: https://github.com/c-ares/c-ares/commit/25a6911370878d4b617b44b142ea0e49d1ccede6 (v1.34.9)
-CVE-2026-XXXX [Uninitialized memory returned for a numeric IPv6 name with a prefix length]
+CVE-2026-XXXX [GHSA-cfcv-8v2j-qj6r: Uninitialized memory returned for a numeric IPv6 name with a prefix length]
- c-ares 1.34.9-1
NOTE: https://github.com/c-ares/c-ares/security/advisories/GHSA-cfcv-8v2j-qj6r
NOTE: https://github.com/c-ares/c-ares/commit/7e65b381c0b915aa5671ddc713080c87e15fc42f (v1.34.9)
-CVE-2026-XXXX [The query cache could return an answer obtained using different EDNS options]
+CVE-2026-XXXX [GHSA-wrgc-prmw-27xh: The query cache could return an answer obtained using different EDNS options]
- c-ares 1.34.9-1
NOTE: https://github.com/c-ares/c-ares/security/advisories/GHSA-wrgc-prmw-27xh
NOTE: https://github.com/c-ares/c-ares/commit/a21160045f9d7039225fa285be7cb1b02173a3a5 (v1.34.9)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3454d87e8cc918bd5a89ebd3acabb4d304e8a246
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3454d87e8cc918bd5a89ebd3acabb4d304e8a246
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261031/92fa947d/attachment.htm>
More information about the debian-security-tracker-commits
mailing list