Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8a3d31a9 by Salvatore Bonaccorso at 2026-07-15T10:59:32+02:00
Add new pyasn1 issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -73,11 +73,17 @@ CVE-2026-59889 (jackson-databind contains the
general-purpose data-binding funct
CVE-2026-59888 (jackson-databind contains the general-purpose data-binding
functionali ...)
TODO: check
CVE-2026-59886 (pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4,
the univ ...)
- TODO: check
+ - pyasn1 <unfixed>
+ NOTE:
https://github.com/pyasn1/pyasn1/security/advisories/GHSA-hm4w-wwcw-mr6r
+ NOTE: Fixed by:
https://github.com/pyasn1/pyasn1/commit/e60c691cb91addb8fcefa2f537e85ede6fb1e886
(v0.6.4)
CVE-2026-59885 (pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4,
the BER, ...)
- TODO: check
+ - pyasn1 <unfixed>
+ NOTE:
https://github.com/pyasn1/pyasn1/security/advisories/GHSA-8ppf-4f7h-5ppj
+ NOTE: Fixed by:
https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9
(v0.6.4)
CVE-2026-59884 (pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4,
the BER ...)
- TODO: check
+ - pyasn1 <unfixed>
+ NOTE:
https://github.com/pyasn1/pyasn1/security/advisories/GHSA-m4p7-r5rc-7g4j
+ NOTE: Fixed by:
https://github.com/pyasn1/pyasn1/commit/628e36ecbb5277a3f01572ce418ef54271b165a5
(v0.6.4)
CVE-2026-59841 (A improper restriction of communication channel to intended
endpoints ...)
NOT-FOR-US: Fortinet
CVE-2026-59840 (A buffer over-read vulnerability in Fortinet FortiOS 7.6.0
through 7.6 ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8a3d31a9fa725837ec806ca07c544c7f864e3760
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8a3d31a9fa725837ec806ca07c544c7f864e3760
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
