[Git][security-tracker-team/security-tracker][master] trixie triage

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1971f1b8 by Moritz Muehlenhoff at 2026-09-25T08:35:12+02:00
trixie triage

- - - - -


2 changed files:

- data/CVE/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -4016,10 +4016,12 @@ CVE-2026-95831 (Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl
 	NOT-FOR-US: Crypt::SelfCertificate Perl module
 CVE-2026-95818 (A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU ...)
 	- glibc <unfixed> (bug #1148728)
+	[trixie] - glibc <no-dsa> (Minor issue)
 	NOTE: https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0023
 	NOTE: Fixed by: https://sourceware.org/git/?p=glibc.git;a=commit;h=ed0c137b97eb940b4b64981e84ed806d3276edd9
 CVE-2026-86805 (A time-of-check to time-of-use (TOCTOU) race condition in the dynamic  ...)
 	- glibc <unfixed> (bug #1148727)
+	[trixie] - glibc <no-dsa> (Minor issue)
 	NOTE: https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0022
 	NOTE: Fixed by: https://sourceware.org/git/?p=glibc.git;a=commit;h=ed0c137b97eb940b4b64981e84ed806d3276edd9
 CVE-2026-87082 (Net::IDN::Punycode versions before 2.590 for Perl hang, crash or retur ...)


=====================================
data/dsa-needed.txt
=====================================
@@ -64,7 +64,7 @@ gst-plugins-good1.0
 hplip
   security patches first need to be isolated
 --
-incus
+incus (jmm)
   Maintainer prepared update for review
 --
 jackson-databind



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1971f1b820a4ede26133ae949f503b18d1c83b6c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1971f1b820a4ede26133ae949f503b18d1c83b6c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260925/f0e0295b/attachment-0001.htm>