Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0d7b17b2 by Moritz Muehlenhoff at 2026-06-12T11:12:02+02:00
two uriparser issues fixed in sid
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -22957,14 +22957,14 @@ CVE-2026-44928 (In uriparser before 1.0.2, the
function family EqualsUri can mis
[trixie] - uriparser <no-dsa> (Minor issue)
[bookworm] - uriparser <no-dsa> (Minor issue)
NOTE: https://github.com/uriparser/uriparser/pull/305
- NOTE: Fixed by:
https://github.com/uriparser/uriparser/commit/723717c713a01c08efed6b3ded9583d7819e3386
+ NOTE: Fixed by:
https://github.com/uriparser/uriparser/commit/723717c713a01c08efed6b3ded9583d7819e3386
(uriparser-1.0.2)
NOTE: Test:
https://github.com/uriparser/uriparser/commit/bd7f2e6c0c17dd78853f85107535391b4635a86d
CVE-2026-44927 (In uriparser before 1.0.2, there is pointer difference
truncation to i ...)
- uriparser <unfixed> (bug #1136088)
[trixie] - uriparser <no-dsa> (Minor issue)
[bookworm] - uriparser <no-dsa> (Minor issue)
NOTE: https://github.com/uriparser/uriparser/pull/304
- NOTE: Fixed by (merge):
https://github.com/uriparser/uriparser/commit/dd98b0fa4ea69084ede319174ef107a5260d1334
+ NOTE: Fixed by (merge):
https://github.com/uriparser/uriparser/commit/dd98b0fa4ea69084ede319174ef107a5260d1334
(uriparser-1.0.2)
CVE-2026-44500 (ZEBRA is a Zcash node written entirely in Rust. Prior to
zebrad versio ...)
NOT-FOR-US: ZEBRA
CVE-2026-44499 (ZEBRA is a Zcash node written entirely in Rust. Prior to
version 4.4.0 ...)
@@ -31788,7 +31788,7 @@ CVE-2026-7059 (A vulnerability was found in 666ghj
MiroFish up to 0.1.2. This af
CVE-2026-7058 (A vulnerability has been found in 666ghj MiroFish up to 0.1.2.
The imp ...)
NOT-FOR-US: 666ghj MiroFish
CVE-2026-42371 (uriparser before 1.0.1 has numeric truncation in text range
comparison ...)
- - uriparser <unfixed> (bug #1135109)
+ - uriparser 1.0.1+dfsg-1 (bug #1135109)
[trixie] - uriparser <no-dsa> (Minor issue)
[bookworm] - uriparser <no-dsa> (Minor issue)
NOTE: https://github.com/uriparser/uriparser/pull/298
@@ -95264,7 +95264,7 @@ CVE-2025-67901 (openrsync through 0.5.0, as used in
OpenBSD through 7.8 and on o
CVE-2025-67900 (NXLog Agent before 6.11 can load a file specified by the
OPENSSL_CONF ...)
NOT-FOR-US: NXLog Agent
CVE-2025-67899 (uriparser through 0.9.9 allows unbounded recursion and stack
consumpti ...)
- - uriparser <unfixed> (bug #1123086)
+ - uriparser 1.0.1+dfsg-1 (bug #1123086)
[trixie] - uriparser <no-dsa> (Minor issue)
[bookworm] - uriparser <no-dsa> (Minor issue)
[bullseye] - uriparser <postponed> (Minor issue)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0d7b17b2f88604bab0d1240f3a5e79452edbf840
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0d7b17b2f88604bab0d1240f3a5e79452edbf840
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
