[Git][security-tracker-team/security-tracker][master] Fix reference to actual libsndfile repository for fix for CVE-2026-88386
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sat Sep 26 13:03:53 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
b3f08cd4 by Salvatore Bonaccorso at 2026-09-26T14:03:16+02:00
Fix reference to actual libsndfile repository for fix for CVE-2026-88386
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -576,7 +576,7 @@ CVE-2026-88387 (LibRaw 0.22.0 contains an incorrect numeric conversion vulnerabi
CVE-2026-88386 (libsndfile 1.2.2 contains a misaligned memory access issue in psf_binh ...)
- libsndfile <unfixed>
NOTE: https://github.com/libsndfile/libsndfile/issues/1150
- NOTE: Fixed by: https://github.com/mhlavink/libsndfileci/commit/474e4d328b1e6240b93ec6ed14efb7c6a44bee57
+ NOTE: Fixed by: https://github.com/libsndfile/libsndfile/commit/474e4d328b1e6240b93ec6ed14efb7c6a44bee57
CVE-2026-87722 (Uncontrolled Resource Consumption (CWE-400 / CWE-1333) in regex search ...)
- gerrit <itp> (bug #589436)
CVE-2026-87721 (Uncontrolled Resource Consumption (CWE-400 / CWE-407) in the ANTLR 3 s ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b3f08cd4300d7a9df53e9ab82bbd34e1ba6023e5
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b3f08cd4300d7a9df53e9ab82bbd34e1ba6023e5
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260926/2b9fb4d0/attachment.htm>
More information about the debian-security-tracker-commits
mailing list