[Git][security-tracker-team/security-tracker][master] Track fixed version for ocaml-cstruct issue

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
eff35317 by Salvatore Bonaccorso at 2026-09-14T12:39:43+02:00
Track fixed version for ocaml-cstruct issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2774,7 +2774,7 @@ CVE-2026-89094 (Forgejo before 16.0.4 allows remote code execution via a crafted
 CVE-2026-89089 (A SQL injection vulnerability exists in the JasperReports-based report ...)
 	NOT-FOR-US: OpenNMS
 CVE-2026-89087 (The cstruct package before 6.3.0 for OCaml mishandles indexes.)
-	- ocaml-cstruct <unfixed> (bug #1147522)
+	- ocaml-cstruct 6.3.0-1 (bug #1147522)
 	[trixie] - ocaml-cstruct <no-dsa> (Minor issue)
 	NOTE: https://osv.dev/vulnerability/OSEC-2026-20
 	NOTE: https://github.com/mirage/ocaml-cstruct/pull/324 (v6.3.0)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eff35317a92fb35c823839d3d58a2296d940becc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eff35317a92fb35c823839d3d58a2296d940becc
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260914/4e2e9b0a/attachment.htm>