[Git][security-tracker-team/security-tracker][master] Remove not-affected status for trixie from CVE-2026-90698

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
eca61a13 by Salvatore Bonaccorso at 2026-09-27T13:29:19+02:00
Remove not-affected status for trixie from CVE-2026-90698

We still have not yet a defitnive assment. Additionally Ubuntu has fixed
the issue for older versions.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -19535,11 +19535,10 @@ CVE-2026-90699 (A weakness has been identified in D-Link DWR-M920 1.1.7. This is
 	NOT-FOR-US: D-Link
 CVE-2026-90698 (A security flaw has been discovered in memcached 1.6.41/1.6.42/1.6.43. ...)
 	- memcached 1.6.45-1
-	[trixie] - memcached <not-affected> (Vulnerable code not present)
 	[bookworm] - memcached <not-affected> (Vulnerable code not present)
 	NOTE: https://protectiv.ph/research/memcached-asciiauth-empty-line-dos
 	NOTE: protocol processing code deduplication done in: https://github.com/memcached/memcached/commit/778cfd6e56a276f69bdd1c4c7725c977147aee47 (1.6.40)
-	NOTE: Introduced with: https://github.com/memcached/memcached/commit/591fba966837b2f3398ccf7b5fe3886ac19e9e20 (1.6.41)
+	NOTE: Further refactoring with: https://github.com/memcached/memcached/commit/591fba966837b2f3398ccf7b5fe3886ac19e9e20 (1.6.41)
 	NOTE: Requisite: https://github.com/memcached/memcached/commit/9981d748f866e80a8f2ee1b12bf45717f9595df9 (1.6.42)
 	NOTE: Fixed by: https://github.com/memcached/memcached/commit/af05c9302bba508b736c3da1d5670f63fe8b7db4 (1.6.44)
 	NOTE: Followup: https://github.com/memcached/memcached/commit/e8364b58b193e42b7db9db8506471a1efe74ab6d (1.6.45)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eca61a13260046d8a5157cb6d8491d35892ae493

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eca61a13260046d8a5157cb6d8491d35892ae493
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260927/98b7b4ff/attachment.htm>