Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
4066d893 by Salvatore Bonaccorso at 2026-06-28T13:21:09+02:00
Track fixed version for CVE-2026-44517 via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -5029,7 +5029,7 @@ CVE-2025-13162 (Uncontrolled Search Path Element
vulnerability in ABB Control Bu
CVE-2023-54365 (Traefik before 2.10.5 and 3.0.0-beta4 is affected by a
denial-of-servi ...)
- traefik <itp> (bug #983289)
CVE-2026-44517
- - golang-github-containers-buildah <unfixed> (bug #1140619)
+ - golang-github-containers-buildah 1.43.2+ds1-1 (bug #1140619)
NOTE:
https://github.com/podman-container-tools/buildah/security/advisories/GHSA-49p4-px3h-rq49
NOTE: Fixed by:
https://github.com/podman-container-tools/buildah/security/advisories/GHSA-49p4-px3h-rq49
(v1.43.2)
CVE-2026-11940 (tarfile.extractall() with the 'data' or 'tar' filter could be
bypasse ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4066d8933186c1ddfe32025ecd7d3f413c7b3aac
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4066d8933186c1ddfe32025ecd7d3f413c7b3aac
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
