[Git][security-tracker-team/security-tracker][master] add upstream reference for r-cran-readxl

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
50faea50 by Moritz Muehlenhoff at 2026-09-21T08:57:39+02:00
add upstream reference for r-cran-readxl

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -14856,12 +14856,14 @@ CVE-2026-79592 (An out-of-bounds read vulnerability exists in the xls_dumpSummar
 	[bookworm] - r-cran-readxl <postponed> (Minor issue)
 	NOTE: https://github.com/libxls/libxls/issues/162
 	NOTE: Fixed by: https://github.com/libxls/libxls/commit/0b31cdbfee31e929aee65906db35691dfe798bd9
+	NOTE: https://github.com/tidyverse/readxl/issues/795
 CVE-2026-79591 (A heap-buffer-overflow and use-after-free vulnerability exists in the  ...)
 	- r-cran-readxl <unfixed> (bug #1147420)
 	[trixie] - r-cran-readxl <no-dsa> (Minor issue)
 	[bookworm] - r-cran-readxl <postponed> (Minor issue)
 	NOTE: https://github.com/libxls/libxls/issues/161
 	NOTE: Fixed by: https://github.com/libxls/libxls/commit/881f6ec3dabb017af878949a6ed7167613bd7a69
+	NOTE: https://github.com/tidyverse/readxl/issues/795
 CVE-2026-79590 (A NULL pointer dereference vulnerability exists in the Prism parser co ...)
 	- mruby <unfixed>
 	[trixie] - mruby <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/50faea500d3d9645530fca9b6d9c2f22e736d139

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/50faea500d3d9645530fca9b6d9c2f22e736d139
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260921/a8005abb/attachment.htm>