[Git][security-tracker-team/security-tracker][master] Add CVE-2026-84445/golang-google-grpc

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7ed77531 by Salvatore Bonaccorso at 2026-09-15T07:22:03+02:00
Add CVE-2026-84445/golang-google-grpc

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -239,7 +239,15 @@ CVE-2026-85921 (Double free in Windows Secure Kernel Mode allows an authorized a
 CVE-2026-85892 (Concurrent execution using shared resource with improper synchronizati ...)
 	NOT-FOR-US: Microsoft
 CVE-2026-84445 (gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and ...)
-	TODO: check
+	- golang-google-grpc <unfixed>
+	NOTE: https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj
+	NOTE: https://github.com/grpc/grpc-go/issues/9354
+	NOTE: https://github.com/grpc/grpc-go/pull/9365
+	NOTE: Fixed by: https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f (master)
+	NOTE: https://github.com/grpc/grpc-go/pull/9366 (v1.83.x backports)
+	NOTE: Fixed by: https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4 (v1.83.2)
+	NOTE: https://github.com/grpc/grpc-go/pull/9367 (v1.82.x backports)
+	NOTE: Fixed by: https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7 (v1.82.2)
 CVE-2026-84179 (Description    getTopologyPageInfo merged the Nimbus daemon configurat ...)
 	TODO: check
 CVE-2026-82920 (Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7ed7753172fac5c61324c29e0fdbaf9e7536c2f4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7ed7753172fac5c61324c29e0fdbaf9e7536c2f4
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260915/217ae99c/attachment.htm>