[Git][security-tracker-team/security-tracker][master] Reserve DLA-4807-1 for expat
Andrej Shadura (@andrewsh)
andrewsh at debian.org
Wed Sep 30 23:17:19 BST 2026
Andrej Shadura pushed to branch master at Debian Security Tracker / security-tracker
Commits:
31393b90 by Andrej Shadura at 2026-10-01T00:16:56+02:00
Reserve DLA-4807-1 for expat
- - - - -
3 changed files:
- data/CVE/list
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -56340,7 +56340,6 @@ CVE-2026-66620 (Editor PHP Object Injection in OptionTree <= 2.7.3 versions.)
CVE-2026-66046 (Expat through 2.8.3 contains a denial of service vulnerability caused ...)
- expat 2.8.4-1 (bug #1144925)
[trixie] - expat <no-dsa> (Minor issue)
- [bookworm] - expat <postponed> (Minor issue)
NOTE: https://github.com/libexpat/libexpat/pull/1321
NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/98f5acc146af76859cd7c345c0906e9e9e8ea656 (R_2_8_4)
NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/f8f7c4ffd883e3c2c58f0ebb49416a6c1d248738 (R_2_8_4)
@@ -143012,7 +143011,6 @@ CVE-2026-8194 (A security vulnerability has been detected in osTicket up to 1.18
CVE-2026-45186 (In libexpat before 2.8.1, the computational complexity of attribute na ...)
{DSA-6404-1}
- expat 2.8.0-2 (bug #1136164)
- [bookworm] - expat <postponed> (Minor issue)
NOTE: https://github.com/libexpat/libexpat/pull/1216
NOTE: https://blog.hartwork.org/posts/expat-2-8-1-released/
CVE-2026-45184 (Kdenlive before 26.04.1 allows dangerous proxy parameters when an atta ...)
@@ -157866,6 +157864,7 @@ CVE-2026-41080 (libexpat before 2.8.0 uses insufficient entropy, and thus hash f
[bullseye] - expat <postponed> (Minor issue)
NOTE: https://github.com/libexpat/libexpat/issues/47
NOTE: https://github.com/libexpat/libexpat/pull/1183
+ NOTE: This fix is required for Python's CVE-2026-7210.
CVE-2026-41034 (ONLYOFFICE DocumentServer before 9.3.0 has an untrusted pointer derefe ...)
NOT-FOR-US: ONLYOFFICE DocumentServer
CVE-2026-41030 (In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows a ...)
@@ -176375,7 +176374,6 @@ CVE-2026-4171 (A security vulnerability has been detected in CodeGenieApp server
CVE-2026-32778 (libexpat before 2.7.5 allows a NULL pointer dereference in the functio ...)
{DSA-6404-1}
- expat 2.7.5-1 (bug #1131119)
- [bookworm] - expat <no-dsa> (Minor issue)
[bullseye] - expat <postponed> (Minor issue)
NOTE: https://github.com/libexpat/libexpat/pull/1163
NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/576b61e42feeea704253cb7c7bedb2eeb3754387
@@ -176383,7 +176381,6 @@ CVE-2026-32778 (libexpat before 2.7.5 allows a NULL pointer dereference in the f
CVE-2026-32777 (libexpat before 2.7.5 allows an infinite loop while parsing DTD conten ...)
{DSA-6404-1}
- expat 2.7.5-1 (bug #1131118)
- [bookworm] - expat <no-dsa> (Minor issue)
[bullseye] - expat <postponed> (Minor issue)
NOTE: https://github.com/libexpat/libexpat/issues/1161
NOTE: https://github.com/libexpat/libexpat/pull/1162
@@ -176392,7 +176389,6 @@ CVE-2026-32777 (libexpat before 2.7.5 allows an infinite loop while parsing DTD
CVE-2026-32776 (libexpat before 2.7.5 allows a NULL pointer dereference with empty ext ...)
{DSA-6404-1}
- expat 2.7.5-1 (bug #1131117)
- [bookworm] - expat <no-dsa> (Minor issue)
[bullseye] - expat <postponed> (Minor issue)
NOTE: https://github.com/libexpat/libexpat/pull/1158
NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/5be25657583ea91b09025c858b4785834c20f59c
@@ -195647,7 +195643,6 @@ CVE-2025-12899 (A flaw in Zephyr\u2019s network stack allows an IPv4 packet cont
CVE-2026-25210 (In libexpat before 2.7.4, the doContent function does not properly det ...)
{DSA-6404-1}
- expat 2.7.4-1 (bug #1126697)
- [bookworm] - expat <no-dsa> (Minor issue)
[bullseye] - expat <postponed> (Minor issue)
NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/7ddea353ad3795f7222441274d4d9a155b523cba (R_2_7_4)
NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/8855346359a475c022ec8c28484a76c852f144d9 (R_2_7_4)
@@ -198045,7 +198040,6 @@ CVE-2025-71145 (In the Linux kernel, the following vulnerability has been resolv
CVE-2026-24515 (In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy ...)
{DSA-6404-1}
- expat 2.7.3-2 (bug #1126277)
- [bookworm] - expat <no-dsa> (Minor issue)
[bullseye] - expat <postponed> (Minor issue, DoS)
NOTE: https://github.com/libexpat/libexpat/pull/1131
NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/86fc914a7acc49246d5fde0ab6ed97eb8a0f15f9 (R_2_7_4)
@@ -249740,7 +249734,6 @@ CVE-2025-59375 (libexpat in Expat before 2.7.2 allows attackers to trigger large
- firefox-esr 140.9.0esr-1
- thunderbird 1:140.9.0esr-1
- expat 2.7.2-1 (bug #1115298)
- [bookworm] - expat <ignored> (Minor issue)
[bullseye] - expat <ignored> (Minor issue, too intrusive to backport)
NOTE: https://github.com/libexpat/libexpat/issues/1018
NOTE: https://github.com/libexpat/libexpat/pull/1034
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[01 Oct 2026] DLA-4807-1 expat - security update
+ {CVE-2024-28757 CVE-2025-59375 CVE-2026-24515 CVE-2026-25210 CVE-2026-32776 CVE-2026-32777 CVE-2026-32778 CVE-2026-45186 CVE-2026-66046 CVE-2026-93990}
+ [bookworm] - expat 2.5.0-1+deb12u4
[30 Sep 2026] DLA-4806-1 pgextwlist - security update
{CVE-2023-39417}
[bookworm] - pgextwlist 1.15-2+deb12u1
=====================================
data/dla-needed.txt
=====================================
@@ -160,12 +160,6 @@ exim4
NOTE: 20260724: local privesc, exim <=4.99.4 affected, fixed in 4.99.5
NOTE: 20260724: EXIM-Security-2026-06-22.1 (High) and .3 (Medium) (utkarsh/front-desk)
--
-expat (andrewsh)
- NOTE: 20260518: Added by Front-Desk (Beuc)
- NOTE: 20260518: Many postponed CVE.
- NOTE: 20260518: CVE-2026-41080 fix requires for python's CVE-2026-7210.
- NOTE: 20260831: CVE-2026-45186 and CVE-2026-66046 require more work (andrewsh)
---
ffmpeg
NOTE: 20260710: Added by Front-Desk (utkarsh)
NOTE: 20260710: CVE-2026-12706: heap UAF in RASC decoder. Fixed in bookworm/trixie/sid
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/31393b9098ed9c6a39932a49fd240df3c82e02ee
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/31393b9098ed9c6a39932a49fd240df3c82e02ee
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260930/fdaf4c32/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list