[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2026-89147/net-snmp: bookworm postponed

[Sylvain Beucler (@beuc)]

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
87de4577 by Sylvain Beucler at 2026-09-19T17:25:32+02:00
CVE-2026-89147/net-snmp: bookworm postponed

- - - - -
8e029bbb by Sylvain Beucler at 2026-09-19T17:25:33+02:00
lts: add parted

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -13822,6 +13822,7 @@ CVE-2026-89148 (AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 c
 CVE-2026-89147 (Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in ...)
 	- net-snmp 5.9.5.2+dfsg-3 (bug #1147442)
 	[trixie] - net-snmp <no-dsa> (Minor issue)
+	[bookworm] - net-snmp <postponed> (Minor issue, DoS)
 	NOTE: https://gist.github.com/thesmartshadow/001cea595e75fed6aaea7389666dc9eb
 CVE-2026-89146 (libp2p-rendezvous through 0.17.1 fails to validate registration TTL va ...)
 	NOT-FOR-US: libp2p-rendezvous


=====================================
data/dla-needed.txt
=====================================
@@ -521,6 +521,9 @@ pacemaker
   NOTE: 20260618: Added by Front-Desk (charles)
   NOTE: 20260618: Package is in dsa-needed (charles)
 --
+parted
+  NOTE: 20260919: Added by Front-Desk (Beuc)
+--
 pcp
   NOTE: 20260801: Added by Front-Desk (ta)
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/193bb9916836a11b021ad2958037dff3287b9e83...8e029bbb044ded8b555e6a5137f9201ff84c9c80

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/193bb9916836a11b021ad2958037dff3287b9e83...8e029bbb044ded8b555e6a5137f9201ff84c9c80
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260919/a4d0950e/attachment-0001.htm>