[Git][security-tracker-team/security-tracker][master] lts: mark two expat issues as postponed

[Emilio Pozuelo Monfort (@pochu)]

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c53354a1 by Emilio Pozuelo Monfort at 2026-09-08T09:14:27+02:00
lts: mark two expat issues as postponed

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -21805,6 +21805,7 @@ CVE-2026-66620 (Editor PHP Object Injection in OptionTree <= 2.7.3 versions.)
 CVE-2026-66046 (Expat through 2.8.3 contains a denial of service vulnerability caused  ...)
 	- expat 2.8.4-1 (bug #1144925)
 	[trixie] - expat <no-dsa> (Minor issue)
+	[bookworm] - expat <postponed> (Minor issue)
 	NOTE: https://github.com/libexpat/libexpat/pull/1321
 	NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/98f5acc146af76859cd7c345c0906e9e9e8ea656 (R_2_8_4)
 	NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/f8f7c4ffd883e3c2c58f0ebb49416a6c1d248738 (R_2_8_4)
@@ -108055,6 +108056,7 @@ CVE-2026-8194 (A security vulnerability has been detected in osTicket up to 1.18
 CVE-2026-45186 (In libexpat before 2.8.1, the computational complexity of attribute na ...)
 	{DSA-6404-1}
 	- expat 2.8.0-2 (bug #1136164)
+	[bookworm] - expat <postponed> (Minor issue)
 	NOTE: https://github.com/libexpat/libexpat/pull/1216
 	NOTE: https://blog.hartwork.org/posts/expat-2-8-1-released/
 CVE-2026-45184 (Kdenlive before 26.04.1 allows dangerous proxy parameters when an atta ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c53354a1251ac45f2e915ee9d738683d5fce8826

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c53354a1251ac45f2e915ee9d738683d5fce8826
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260908/7c2dd56d/attachment-0001.htm>