[Git][security-tracker-team/security-tracker][master] Add CVE-2026-90781/alsa-lib

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4946efee by Salvatore Bonaccorso at 2026-09-13T21:30:36+02:00
Add CVE-2026-90781/alsa-lib

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4,7 +4,9 @@ CVE-2026-90783 (MKVToolNix through 101.0 contains a heap buffer overflow in the
 CVE-2026-90782 (S2OPC through 1.7.3 contains a null pointer dereference in msg_subscri ...)
 	NOT-FOR-US: Systerel S2OPC
 CVE-2026-90781 (alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __sn ...)
-	TODO: check
+	- alsa-lib <unfixed>
+	NOTE: https://lore.kernel.org/alsa-devel/CACBQ=P2FhO3M6dkv3cWuKb6Qhs92ouV+FJ3SJZ_PVBSSdJWRAQ@mail.gmail.com/
+	NOTE: Fixed by: https://github.com/alsa-project/alsa-lib/commit/f84cd4ced7b36fddb8e4ee24404cf7c091d27020
 CVE-2026-90780 (SIPp through 3.7.7 contains a buffer overflow vulnerability in the get ...)
 	NOT-FOR-US: SIPp
 CVE-2026-90779 (SIPp through 3.7.7 contains a stack buffer overflow vulnerability in c ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4946efee38e7d543bf46c9887a1af915a5f3a305

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4946efee38e7d543bf46c9887a1af915a5f3a305
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260913/863a791d/attachment.htm>