[Git][security-tracker-team/security-tracker][master] 2 commits: Typo

[Sylvain Beucler (@beuc)]

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
06f14d66 by Sylvain Beucler at 2026-09-14T13:26:31+02:00
Typo

- - - - -
db0b8077 by Sylvain Beucler at 2026-09-14T13:26:34+02:00
CVE-2026-39113/sqlite: fix commit

Cf. https://github.com/20000419/CVE-2026-39113
> No official SQLite release was verified vulnerable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -21493,9 +21493,10 @@ CVE-2026-3002 (The Gutenverse \u2013 Ultimate WordPress FSE Blocks Addons & Ecos
 CVE-2026-39113 (Buffer Overflow vulnerability in SQLite affected version source snapsh ...)
 	- sqlite3 3.53.2-1
 	[trixie] - sqlite3 <no-dsa> (Minor issue)
-	[bookworm] - sqlite3 <postponed> (Minor issue)
+	[bookworm] - sqlite3 <not-affected> (Vulnerable code introduced later)
 	NOTE: https://github.com/20000419/CVE-2026-39113
-	NOTE: https://github.com/sqlite/sqlite/commit/169f68ed88b34cb68f720191c64c058f2ccec508 (version-3.53.0)
+	NOTE: Introduced by: https://github.com/sqlite/sqlite/commit/169f68ed88b34cb68f720191c64c058f2ccec508 (version-3.53.0)
+	NOTE: Fixed by: https://github.com/sqlite/sqlite/commit/d1b51d49551d03ac2d47f3164df4096e4b8c6efb (version-3.53.0)
 CVE-2026-38474 (GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d1 ...)
 	NOT-FOR-US: GazellePW
 CVE-2026-38473 (A Stored XSS vulnerability in the subtitle deletion flow in GazellePW  ...)
@@ -38512,8 +38513,8 @@ CVE-2026-15413 (The Link Factory WordPress plugin is a backdoor. Distributed as
 CVE-2026-14456 (Issue summary: When an OpenSSL QUIC server (Listener SSL object) proce ...)
 	{DSA-6465-1}
 	- openssl 3.6.4-1 (bug #1144615)
-	[bookworm] - openssl <not-affected> (Vulnerble code introduced later)
-	[bullseye] - openssl <not-affected> (Vulnerble code introduced later)
+	[bookworm] - openssl <not-affected> (Vulnerable code introduced later)
+	[bullseye] - openssl <not-affected> (Vulnerable code introduced later)
 	NOTE: https://openssl-library.org/news/secadv/20260813.txt
 	NOTE: https://github.com/openssl/openssl/commit/f2f1465f2d2e5c61dfeac4d20fd093797d821139 (openssl-4.0.2)
 	NOTE: https://github.com/openssl/openssl/commit/4084152e040329ca0194c4c1750b9b46d00a5b6b (openssl-3.6.4)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/6fdb257dd4a01318eaf3753a600dedba55cae0a7...db0b8077dfc346c86bcab47a3b47b2b4a2c69000

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/6fdb257dd4a01318eaf3753a600dedba55cae0a7...db0b8077dfc346c86bcab47a3b47b2b4a2c69000
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260914/60cbd797/attachment.htm>