Bastien Roucariès pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
57254ed9 by Bastien Roucariès at 2026-06-09T23:34:05+02:00
libcpanel-json-xs-perl/bullseye
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -7149,12 +7149,14 @@ CVE-2026-9516 (Cpanel::JSON::XS versions before 4.41
for Perl allow denial of se
- libcpanel-json-xs-perl 4.41-1 (bug #1138273)
[trixie] - libcpanel-json-xs-perl <no-dsa> (Minor issue)
[bookworm] - libcpanel-json-xs-perl <no-dsa> (Minor issue)
+ [bullseye] - libcpanel-json-xs-perl <postponed> (Minor issue)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/40653165/
NOTE: Fixed by:
https://github.com/rurban/Cpanel-JSON-XS/commit/dfe1b41a36caba51dc12a2917fe50285d1ffaa7b
(4.41)
CVE-2026-9334 (Cpanel::JSON::XS versions before 4.41 for Perl allow type
confusion vi ...)
- libcpanel-json-xs-perl 4.41-1 (bug #1138273)
[trixie] - libcpanel-json-xs-perl <no-dsa> (Minor issue)
[bookworm] - libcpanel-json-xs-perl <no-dsa> (Minor issue)
+ [bullseye] - libcpanel-json-xs-perl <postponed> (Minor issue)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/40653179/
NOTE: Fixed by:
https://github.com/rurban/Cpanel-JSON-XS/commit/11a7c550a0d8fac2f84414f24d5df9b2bfe346e2
(4.41)
CVE-2026-XXXX [Attacker-controlled heap out-of-bounds write in libvncclient
Tight decoder]
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/57254ed9188474fb8f6753db1113aa0d8fcf8246
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/57254ed9188474fb8f6753db1113aa0d8fcf8246
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits