[Git][security-tracker-team/security-tracker][master] Two CVEs for freeciv issues assigned

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
04750e50 by Salvatore Bonaccorso at 2026-09-12T21:26:39+02:00
Two CVEs for freeciv issues assigned

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -6,10 +6,6 @@ CVE-2026-90559 (snappy-java through 1.1.10.8 contains an out-of-bounds write vul
 	TODO: check
 CVE-2026-90558 (sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in ...)
 	TODO: check
-CVE-2026-90557 (Freeciv versions 3.1.0 through 3.2.5 contain an out-of-bounds read vul ...)
-	TODO: check
-CVE-2026-90556 (Freeciv versions before 3.2.6 contain a heap buffer overflow in workli ...)
-	TODO: check
 CVE-2026-90555 (vLLM versions before 0.28.0 fail to validate audio sample rate headers ...)
 	TODO: check
 CVE-2026-90554 (vLLM versions >=0.10.2 and <0.28.0 do not apply any audio decode-size  ...)
@@ -10502,11 +10498,11 @@ CVE-2026-80762 (In the Linux kernel, the following vulnerability has been resolv
 CVE-2026-80761 (In the Linux kernel, the following vulnerability has been resolved:  B ...)
 	- linux 7.1.12-1
 	NOTE: https://git.kernel.org/linus/884cf2cc957da7ac178a0e6c6c69ddfec0481cc8 (7.3-rc1)
-CVE-2026-XXXX [freeciv Heap buffer overflow in worklist_load() via unbounded wl_length from save file]
+CVE-2026-90556 [freeciv Heap buffer overflow in worklist_load() via unbounded wl_length from save file]
 	- freeciv 3.2.6+ds-1
 	[trixie] - freeciv <no-dsa> (Minor issue)
 	NOTE: https://redmine.freeciv.org/issues/2161
-CVE-2026-XXXX [Out-of-bounds read in activities.order]
+CVE-2026-90557 [Out-of-bounds read in activities.order]
 	- freeciv 3.2.6+ds-1 (unimportant)
 	NOTE: Crash in CLI tool, no security impact
 	NOTE: https://redmine.freeciv.org/issues/2162



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/04750e5044adc2339d9ea9217fdce502f5279029

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/04750e5044adc2339d9ea9217fdce502f5279029
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260912/f3c3858d/attachment.htm>