[Git][security-tracker-team/security-tracker][master] Add two more rust-rustls-webpki issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0f6d2ed9 by Salvatore Bonaccorso at 2026-09-18T22:58:24+02:00
Add two more rust-rustls-webpki issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -85,9 +85,11 @@ CVE-2026-93604 (vm2 through 3.12.0 exposes Node.js's crypto.setFips() function t
 CVE-2026-93603 (vm2 through 3.12.0 (fixed in 3.12.1) does not correctly handle a nulli ...)
 	NOT-FOR-US: Node.js vm2
 CVE-2026-93601 (rustls-webpki (the Rust webpki fork used by rustls) versions >= 0.101. ...)
-	TODO: check
+	- rust-rustls-webpki 0.103.13+ds-1
+	NOTE: https://github.com/rustls/webpki/security/advisories/GHSA-xgp8-3hg3-c2mh
 CVE-2026-93600 (rustls-webpki (rustls/webpki) versions 0.101.0 through 0.103.11 and 0. ...)
-	TODO: check
+	- rust-rustls-webpki 0.103.13+ds-1
+	NOTE: https://github.com/rustls/webpki/security/advisories/GHSA-965h-392x-2mh5
 CVE-2026-93598 (ArcadeDB (Maven artifact com.arcadedb:arcadedb-engine) through 26.8.1  ...)
 	TODO: check
 CVE-2026-93597 (ArcadeDB versions before 26.9.1 fail to validate IPv6 transition addre ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0f6d2ed9cdfb0fb26a0714f8688d537d2699f34d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0f6d2ed9cdfb0fb26a0714f8688d537d2699f34d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260918/4abe855c/attachment-0001.htm>