Sync Collecting Fix Commits: Wed Aug 19 12:43:30 UTC 2026

Signed-off-by: AboutCode Automation <automation@aboutcode.org>

Author: aboutcode-automation

data/fix-commits/advisory-database-b78f1d41.json

@@ -1,6 +1,67 @@
 {
   "vcs_url": "https://github.com/github/advisory-database",
   "vulnerabilities": {
+    "GHSA-3HM7-M5P9-2H77": {
+      "ef9d0628795e5067c1040d276be26bc9adfe896c": "Publish Advisories\n\nGHSA-3hm7-m5p9-2h77\nGHSA-5q67-rff6-c784\nGHSA-7h55-5jqw-fvcq\nGHSA-c5hg-f3pf-qgxh\nGHSA-gqrg-h59c-j4wj\nGHSA-hpv2-jq93-768m\nGHSA-hv4c-3wcw-pxh2\nGHSA-j94h-9p69-vhvm\nGHSA-j9wr-x478-q66c\nGHSA-jjwm-g4j5-q96v\nGHSA-p3pr-3qq8-w67c\nGHSA-p4v3-cw55-5mrc\nGHSA-pc6p-pvrm-j4j5\nGHSA-ph3x-qgrx-fv78\nGHSA-pvgp-75fv-2h99\nGHSA-r57r-q66w-6qxq\nGHSA-v45q-rmh4-rr86\nGHSA-v78v-rxq5-6w38\nGHSA-vv7x-5v76-w79j"
+    },
+    "GHSA-5Q67-RFF6-C784": {
+      "ef9d0628795e5067c1040d276be26bc9adfe896c": "Publish Advisories\n\nGHSA-3hm7-m5p9-2h77\nGHSA-5q67-rff6-c784\nGHSA-7h55-5jqw-fvcq\nGHSA-c5hg-f3pf-qgxh\nGHSA-gqrg-h59c-j4wj\nGHSA-hpv2-jq93-768m\nGHSA-hv4c-3wcw-pxh2\nGHSA-j94h-9p69-vhvm\nGHSA-j9wr-x478-q66c\nGHSA-jjwm-g4j5-q96v\nGHSA-p3pr-3qq8-w67c\nGHSA-p4v3-cw55-5mrc\nGHSA-pc6p-pvrm-j4j5\nGHSA-ph3x-qgrx-fv78\nGHSA-pvgp-75fv-2h99\nGHSA-r57r-q66w-6qxq\nGHSA-v45q-rmh4-rr86\nGHSA-v78v-rxq5-6w38\nGHSA-vv7x-5v76-w79j"
+    },
+    "GHSA-7H55-5JQW-FVCQ": {
+      "ef9d0628795e5067c1040d276be26bc9adfe896c": "Publish Advisories\n\nGHSA-3hm7-m5p9-2h77\nGHSA-5q67-rff6-c784\nGHSA-7h55-5jqw-fvcq\nGHSA-c5hg-f3pf-qgxh\nGHSA-gqrg-h59c-j4wj\nGHSA-hpv2-jq93-768m\nGHSA-hv4c-3wcw-pxh2\nGHSA-j94h-9p69-vhvm\nGHSA-j9wr-x478-q66c\nGHSA-jjwm-g4j5-q96v\nGHSA-p3pr-3qq8-w67c\nGHSA-p4v3-cw55-5mrc\nGHSA-pc6p-pvrm-j4j5\nGHSA-ph3x-qgrx-fv78\nGHSA-pvgp-75fv-2h99\nGHSA-r57r-q66w-6qxq\nGHSA-v45q-rmh4-rr86\nGHSA-v78v-rxq5-6w38\nGHSA-vv7x-5v76-w79j"
+    },
+    "GHSA-C5HG-F3PF-QGXH": {
+      "ef9d0628795e5067c1040d276be26bc9adfe896c": "Publish Advisories\n\nGHSA-3hm7-m5p9-2h77\nGHSA-5q67-rff6-c784\nGHSA-7h55-5jqw-fvcq\nGHSA-c5hg-f3pf-qgxh\nGHSA-gqrg-h59c-j4wj\nGHSA-hpv2-jq93-768m\nGHSA-hv4c-3wcw-pxh2\nGHSA-j94h-9p69-vhvm\nGHSA-j9wr-x478-q66c\nGHSA-jjwm-g4j5-q96v\nGHSA-p3pr-3qq8-w67c\nGHSA-p4v3-cw55-5mrc\nGHSA-pc6p-pvrm-j4j5\nGHSA-ph3x-qgrx-fv78\nGHSA-pvgp-75fv-2h99\nGHSA-r57r-q66w-6qxq\nGHSA-v45q-rmh4-rr86\nGHSA-v78v-rxq5-6w38\nGHSA-vv7x-5v76-w79j"
+    },
+    "GHSA-GQRG-H59C-J4WJ": {
+      "ef9d0628795e5067c1040d276be26bc9adfe896c": "Publish Advisories\n\nGHSA-3hm7-m5p9-2h77\nGHSA-5q67-rff6-c784\nGHSA-7h55-5jqw-fvcq\nGHSA-c5hg-f3pf-qgxh\nGHSA-gqrg-h59c-j4wj\nGHSA-hpv2-jq93-768m\nGHSA-hv4c-3wcw-pxh2\nGHSA-j94h-9p69-vhvm\nGHSA-j9wr-x478-q66c\nGHSA-jjwm-g4j5-q96v\nGHSA-p3pr-3qq8-w67c\nGHSA-p4v3-cw55-5mrc\nGHSA-pc6p-pvrm-j4j5\nGHSA-ph3x-qgrx-fv78\nGHSA-pvgp-75fv-2h99\nGHSA-r57r-q66w-6qxq\nGHSA-v45q-rmh4-rr86\nGHSA-v78v-rxq5-6w38\nGHSA-vv7x-5v76-w79j"
+    },
+    "GHSA-HPV2-JQ93-768M": {
+      "ef9d0628795e5067c1040d276be26bc9adfe896c": "Publish Advisories\n\nGHSA-3hm7-m5p9-2h77\nGHSA-5q67-rff6-c784\nGHSA-7h55-5jqw-fvcq\nGHSA-c5hg-f3pf-qgxh\nGHSA-gqrg-h59c-j4wj\nGHSA-hpv2-jq93-768m\nGHSA-hv4c-3wcw-pxh2\nGHSA-j94h-9p69-vhvm\nGHSA-j9wr-x478-q66c\nGHSA-jjwm-g4j5-q96v\nGHSA-p3pr-3qq8-w67c\nGHSA-p4v3-cw55-5mrc\nGHSA-pc6p-pvrm-j4j5\nGHSA-ph3x-qgrx-fv78\nGHSA-pvgp-75fv-2h99\nGHSA-r57r-q66w-6qxq\nGHSA-v45q-rmh4-rr86\nGHSA-v78v-rxq5-6w38\nGHSA-vv7x-5v76-w79j"
+    },
+    "GHSA-HV4C-3WCW-PXH2": {
+      "ef9d0628795e5067c1040d276be26bc9adfe896c": "Publish Advisories\n\nGHSA-3hm7-m5p9-2h77\nGHSA-5q67-rff6-c784\nGHSA-7h55-5jqw-fvcq\nGHSA-c5hg-f3pf-qgxh\nGHSA-gqrg-h59c-j4wj\nGHSA-hpv2-jq93-768m\nGHSA-hv4c-3wcw-pxh2\nGHSA-j94h-9p69-vhvm\nGHSA-j9wr-x478-q66c\nGHSA-jjwm-g4j5-q96v\nGHSA-p3pr-3qq8-w67c\nGHSA-p4v3-cw55-5mrc\nGHSA-pc6p-pvrm-j4j5\nGHSA-ph3x-qgrx-fv78\nGHSA-pvgp-75fv-2h99\nGHSA-r57r-q66w-6qxq\nGHSA-v45q-rmh4-rr86\nGHSA-v78v-rxq5-6w38\nGHSA-vv7x-5v76-w79j"
+    },
+    "GHSA-J94H-9P69-VHVM": {
+      "ef9d0628795e5067c1040d276be26bc9adfe896c": "Publish Advisories\n\nGHSA-3hm7-m5p9-2h77\nGHSA-5q67-rff6-c784\nGHSA-7h55-5jqw-fvcq\nGHSA-c5hg-f3pf-qgxh\nGHSA-gqrg-h59c-j4wj\nGHSA-hpv2-jq93-768m\nGHSA-hv4c-3wcw-pxh2\nGHSA-j94h-9p69-vhvm\nGHSA-j9wr-x478-q66c\nGHSA-jjwm-g4j5-q96v\nGHSA-p3pr-3qq8-w67c\nGHSA-p4v3-cw55-5mrc\nGHSA-pc6p-pvrm-j4j5\nGHSA-ph3x-qgrx-fv78\nGHSA-pvgp-75fv-2h99\nGHSA-r57r-q66w-6qxq\nGHSA-v45q-rmh4-rr86\nGHSA-v78v-rxq5-6w38\nGHSA-vv7x-5v76-w79j"
+    },
+    "GHSA-J9WR-X478-Q66C": {
+      "ef9d0628795e5067c1040d276be26bc9adfe896c": "Publish Advisories\n\nGHSA-3hm7-m5p9-2h77\nGHSA-5q67-rff6-c784\nGHSA-7h55-5jqw-fvcq\nGHSA-c5hg-f3pf-qgxh\nGHSA-gqrg-h59c-j4wj\nGHSA-hpv2-jq93-768m\nGHSA-hv4c-3wcw-pxh2\nGHSA-j94h-9p69-vhvm\nGHSA-j9wr-x478-q66c\nGHSA-jjwm-g4j5-q96v\nGHSA-p3pr-3qq8-w67c\nGHSA-p4v3-cw55-5mrc\nGHSA-pc6p-pvrm-j4j5\nGHSA-ph3x-qgrx-fv78\nGHSA-pvgp-75fv-2h99\nGHSA-r57r-q66w-6qxq\nGHSA-v45q-rmh4-rr86\nGHSA-v78v-rxq5-6w38\nGHSA-vv7x-5v76-w79j"
+    },
+    "GHSA-JJWM-G4J5-Q96V": {
+      "ef9d0628795e5067c1040d276be26bc9adfe896c": "Publish Advisories\n\nGHSA-3hm7-m5p9-2h77\nGHSA-5q67-rff6-c784\nGHSA-7h55-5jqw-fvcq\nGHSA-c5hg-f3pf-qgxh\nGHSA-gqrg-h59c-j4wj\nGHSA-hpv2-jq93-768m\nGHSA-hv4c-3wcw-pxh2\nGHSA-j94h-9p69-vhvm\nGHSA-j9wr-x478-q66c\nGHSA-jjwm-g4j5-q96v\nGHSA-p3pr-3qq8-w67c\nGHSA-p4v3-cw55-5mrc\nGHSA-pc6p-pvrm-j4j5\nGHSA-ph3x-qgrx-fv78\nGHSA-pvgp-75fv-2h99\nGHSA-r57r-q66w-6qxq\nGHSA-v45q-rmh4-rr86\nGHSA-v78v-rxq5-6w38\nGHSA-vv7x-5v76-w79j"
+    },
+    "GHSA-P3PR-3QQ8-W67C": {
+      "ef9d0628795e5067c1040d276be26bc9adfe896c": "Publish Advisories\n\nGHSA-3hm7-m5p9-2h77\nGHSA-5q67-rff6-c784\nGHSA-7h55-5jqw-fvcq\nGHSA-c5hg-f3pf-qgxh\nGHSA-gqrg-h59c-j4wj\nGHSA-hpv2-jq93-768m\nGHSA-hv4c-3wcw-pxh2\nGHSA-j94h-9p69-vhvm\nGHSA-j9wr-x478-q66c\nGHSA-jjwm-g4j5-q96v\nGHSA-p3pr-3qq8-w67c\nGHSA-p4v3-cw55-5mrc\nGHSA-pc6p-pvrm-j4j5\nGHSA-ph3x-qgrx-fv78\nGHSA-pvgp-75fv-2h99\nGHSA-r57r-q66w-6qxq\nGHSA-v45q-rmh4-rr86\nGHSA-v78v-rxq5-6w38\nGHSA-vv7x-5v76-w79j"
+    },
+    "GHSA-P4V3-CW55-5MRC": {
+      "ef9d0628795e5067c1040d276be26bc9adfe896c": "Publish Advisories\n\nGHSA-3hm7-m5p9-2h77\nGHSA-5q67-rff6-c784\nGHSA-7h55-5jqw-fvcq\nGHSA-c5hg-f3pf-qgxh\nGHSA-gqrg-h59c-j4wj\nGHSA-hpv2-jq93-768m\nGHSA-hv4c-3wcw-pxh2\nGHSA-j94h-9p69-vhvm\nGHSA-j9wr-x478-q66c\nGHSA-jjwm-g4j5-q96v\nGHSA-p3pr-3qq8-w67c\nGHSA-p4v3-cw55-5mrc\nGHSA-pc6p-pvrm-j4j5\nGHSA-ph3x-qgrx-fv78\nGHSA-pvgp-75fv-2h99\nGHSA-r57r-q66w-6qxq\nGHSA-v45q-rmh4-rr86\nGHSA-v78v-rxq5-6w38\nGHSA-vv7x-5v76-w79j"
+    },
+    "GHSA-PC6P-PVRM-J4J5": {
+      "ef9d0628795e5067c1040d276be26bc9adfe896c": "Publish Advisories\n\nGHSA-3hm7-m5p9-2h77\nGHSA-5q67-rff6-c784\nGHSA-7h55-5jqw-fvcq\nGHSA-c5hg-f3pf-qgxh\nGHSA-gqrg-h59c-j4wj\nGHSA-hpv2-jq93-768m\nGHSA-hv4c-3wcw-pxh2\nGHSA-j94h-9p69-vhvm\nGHSA-j9wr-x478-q66c\nGHSA-jjwm-g4j5-q96v\nGHSA-p3pr-3qq8-w67c\nGHSA-p4v3-cw55-5mrc\nGHSA-pc6p-pvrm-j4j5\nGHSA-ph3x-qgrx-fv78\nGHSA-pvgp-75fv-2h99\nGHSA-r57r-q66w-6qxq\nGHSA-v45q-rmh4-rr86\nGHSA-v78v-rxq5-6w38\nGHSA-vv7x-5v76-w79j"
+    },
+    "GHSA-PH3X-QGRX-FV78": {
+      "ef9d0628795e5067c1040d276be26bc9adfe896c": "Publish Advisories\n\nGHSA-3hm7-m5p9-2h77\nGHSA-5q67-rff6-c784\nGHSA-7h55-5jqw-fvcq\nGHSA-c5hg-f3pf-qgxh\nGHSA-gqrg-h59c-j4wj\nGHSA-hpv2-jq93-768m\nGHSA-hv4c-3wcw-pxh2\nGHSA-j94h-9p69-vhvm\nGHSA-j9wr-x478-q66c\nGHSA-jjwm-g4j5-q96v\nGHSA-p3pr-3qq8-w67c\nGHSA-p4v3-cw55-5mrc\nGHSA-pc6p-pvrm-j4j5\nGHSA-ph3x-qgrx-fv78\nGHSA-pvgp-75fv-2h99\nGHSA-r57r-q66w-6qxq\nGHSA-v45q-rmh4-rr86\nGHSA-v78v-rxq5-6w38\nGHSA-vv7x-5v76-w79j"
+    },
+    "GHSA-PVGP-75FV-2H99": {
+      "ef9d0628795e5067c1040d276be26bc9adfe896c": "Publish Advisories\n\nGHSA-3hm7-m5p9-2h77\nGHSA-5q67-rff6-c784\nGHSA-7h55-5jqw-fvcq\nGHSA-c5hg-f3pf-qgxh\nGHSA-gqrg-h59c-j4wj\nGHSA-hpv2-jq93-768m\nGHSA-hv4c-3wcw-pxh2\nGHSA-j94h-9p69-vhvm\nGHSA-j9wr-x478-q66c\nGHSA-jjwm-g4j5-q96v\nGHSA-p3pr-3qq8-w67c\nGHSA-p4v3-cw55-5mrc\nGHSA-pc6p-pvrm-j4j5\nGHSA-ph3x-qgrx-fv78\nGHSA-pvgp-75fv-2h99\nGHSA-r57r-q66w-6qxq\nGHSA-v45q-rmh4-rr86\nGHSA-v78v-rxq5-6w38\nGHSA-vv7x-5v76-w79j"
+    },
+    "GHSA-R57R-Q66W-6QXQ": {
+      "ef9d0628795e5067c1040d276be26bc9adfe896c": "Publish Advisories\n\nGHSA-3hm7-m5p9-2h77\nGHSA-5q67-rff6-c784\nGHSA-7h55-5jqw-fvcq\nGHSA-c5hg-f3pf-qgxh\nGHSA-gqrg-h59c-j4wj\nGHSA-hpv2-jq93-768m\nGHSA-hv4c-3wcw-pxh2\nGHSA-j94h-9p69-vhvm\nGHSA-j9wr-x478-q66c\nGHSA-jjwm-g4j5-q96v\nGHSA-p3pr-3qq8-w67c\nGHSA-p4v3-cw55-5mrc\nGHSA-pc6p-pvrm-j4j5\nGHSA-ph3x-qgrx-fv78\nGHSA-pvgp-75fv-2h99\nGHSA-r57r-q66w-6qxq\nGHSA-v45q-rmh4-rr86\nGHSA-v78v-rxq5-6w38\nGHSA-vv7x-5v76-w79j"
+    },
+    "GHSA-V45Q-RMH4-RR86": {
+      "ef9d0628795e5067c1040d276be26bc9adfe896c": "Publish Advisories\n\nGHSA-3hm7-m5p9-2h77\nGHSA-5q67-rff6-c784\nGHSA-7h55-5jqw-fvcq\nGHSA-c5hg-f3pf-qgxh\nGHSA-gqrg-h59c-j4wj\nGHSA-hpv2-jq93-768m\nGHSA-hv4c-3wcw-pxh2\nGHSA-j94h-9p69-vhvm\nGHSA-j9wr-x478-q66c\nGHSA-jjwm-g4j5-q96v\nGHSA-p3pr-3qq8-w67c\nGHSA-p4v3-cw55-5mrc\nGHSA-pc6p-pvrm-j4j5\nGHSA-ph3x-qgrx-fv78\nGHSA-pvgp-75fv-2h99\nGHSA-r57r-q66w-6qxq\nGHSA-v45q-rmh4-rr86\nGHSA-v78v-rxq5-6w38\nGHSA-vv7x-5v76-w79j"
+    },
+    "GHSA-V78V-RXQ5-6W38": {
+      "ef9d0628795e5067c1040d276be26bc9adfe896c": "Publish Advisories\n\nGHSA-3hm7-m5p9-2h77\nGHSA-5q67-rff6-c784\nGHSA-7h55-5jqw-fvcq\nGHSA-c5hg-f3pf-qgxh\nGHSA-gqrg-h59c-j4wj\nGHSA-hpv2-jq93-768m\nGHSA-hv4c-3wcw-pxh2\nGHSA-j94h-9p69-vhvm\nGHSA-j9wr-x478-q66c\nGHSA-jjwm-g4j5-q96v\nGHSA-p3pr-3qq8-w67c\nGHSA-p4v3-cw55-5mrc\nGHSA-pc6p-pvrm-j4j5\nGHSA-ph3x-qgrx-fv78\nGHSA-pvgp-75fv-2h99\nGHSA-r57r-q66w-6qxq\nGHSA-v45q-rmh4-rr86\nGHSA-v78v-rxq5-6w38\nGHSA-vv7x-5v76-w79j"
+    },
+    "GHSA-VV7X-5V76-W79J": {
+      "ef9d0628795e5067c1040d276be26bc9adfe896c": "Publish Advisories\n\nGHSA-3hm7-m5p9-2h77\nGHSA-5q67-rff6-c784\nGHSA-7h55-5jqw-fvcq\nGHSA-c5hg-f3pf-qgxh\nGHSA-gqrg-h59c-j4wj\nGHSA-hpv2-jq93-768m\nGHSA-hv4c-3wcw-pxh2\nGHSA-j94h-9p69-vhvm\nGHSA-j9wr-x478-q66c\nGHSA-jjwm-g4j5-q96v\nGHSA-p3pr-3qq8-w67c\nGHSA-p4v3-cw55-5mrc\nGHSA-pc6p-pvrm-j4j5\nGHSA-ph3x-qgrx-fv78\nGHSA-pvgp-75fv-2h99\nGHSA-r57r-q66w-6qxq\nGHSA-v45q-rmh4-rr86\nGHSA-v78v-rxq5-6w38\nGHSA-vv7x-5v76-w79j"
+    },
+    "GHSA-8QQM-FP2Q-V734": {
+      "d1f46a059fe91dbcf18ad60b93d494a4f5ab2772": "Improve GHSA-8qqm-fp2q-v734",
+      "1dbd44058e428445290bfb1f6fc6ecc0addbfd35": "Publish Advisories\n\nGHSA-8qqm-fp2q-v734\nGHSA-xcpc-8h2w-3j85"
+    },
     "GHSA-3XPF-XQ7R-V8C5": {
       "7b74c02d6b0e58785dddb8965dda8882deb42659": "Publish Advisories\n\nGHSA-3xpf-xq7r-v8c5\nGHSA-73cq-mcgh-379c\nGHSA-c6xh-wv4j-ppv5",
       "6a26233025d64fd43dfa7614ad293105aa0630eb": "Publish GHSA-3xpf-xq7r-v8c5"
@@ -8676,9 +8737,6 @@
     "GHSA-G46Q-9M87-Q8FX": {
       "8b1565557a8e0fb04634f0989d7e7dd7febd4847": "Publish Advisories\n\nGHSA-fqqw-xx8r-56hq\nGHSA-g46q-9m87-q8fx"
     },
-    "GHSA-8QQM-FP2Q-V734": {
-      "1dbd44058e428445290bfb1f6fc6ecc0addbfd35": "Publish Advisories\n\nGHSA-8qqm-fp2q-v734\nGHSA-xcpc-8h2w-3j85"
-    },
     "GHSA-XCPC-8H2W-3J85": {
       "1dbd44058e428445290bfb1f6fc6ecc0addbfd35": "Publish Advisories\n\nGHSA-8qqm-fp2q-v734\nGHSA-xcpc-8h2w-3j85"
     },

data/fix-commits/buildroot-0b809119.json

@@ -1,6 +1,12 @@
 {
   "vcs_url": "https://github.com/buildroot/buildroot",
   "vulnerabilities": {
+    "CVE-2026-7867": {
+      "93049b2559b4e87a6d03cf8c1b0125ffeab86477": "package/udisks: security bump to version 2.11.2\n\nThis fixes this CVE:\nCVE-2026-7867:\nhttps://github.com/storaged-project/udisks/security/advisories/GHSA-j42g-v9jw-6ph3\n\nRelease notes:\nhttps://github.com/storaged-project/udisks/releases/tag/udisks-2.11.2\n\nSigned-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>\nSigned-off-by: Peter Korsgaard <peter@korsgaard.com>"
+    },
+    "GHSA-J42G-V9JW-6PH3": {
+      "93049b2559b4e87a6d03cf8c1b0125ffeab86477": "package/udisks: security bump to version 2.11.2\n\nThis fixes this CVE:\nCVE-2026-7867:\nhttps://github.com/storaged-project/udisks/security/advisories/GHSA-j42g-v9jw-6ph3\n\nRelease notes:\nhttps://github.com/storaged-project/udisks/releases/tag/udisks-2.11.2\n\nSigned-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>\nSigned-off-by: Peter Korsgaard <peter@korsgaard.com>"
+    },
     "CVE-2026-5917": {
       "2d40ae9f2c6026fe201c894c79b2fc844e953465": "package/libgit2: security bump version to 1.9.7\n\nFixes CVE-2026-5917 when used with libssh2\n\nRelease notes:\nhttps://github.com/libgit2/libgit2/releases/tag/v1.9.7\n\nSigned-off-by: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>\nSigned-off-by: Peter Korsgaard <peter@korsgaard.com>"
     },

data/fix-commits/nixpkgs-97436190.json

@@ -1,6 +1,16 @@
 {
   "vcs_url": "https://github.com/nixos/nixpkgs",
   "vulnerabilities": {
+    "CVE-2026-6368": {
+      "3c20b5309bae95ca6b6cd3d2f8ce92ddb87a4b08": "glibc: 2.42-67 -> 2.42-84, fixes CVE-2026-6368 & CVE-2026-6791\n\nCloses #551399\nCloses #551398\n\nThe most recent fixes from #537324 are now part of the 2.42 branch.\n\n(cherry picked from commit 90c611df0c285d56480c5aa72d2ec0f27c9dcf6d)",
+      "9507691c9380554a38c606868963a65d5bb08ab7": "glibc: 2.42-67 -> 2.42-84, fixes CVE-2026-6368 & CVE-2026-6791 (#553328)",
+      "90c611df0c285d56480c5aa72d2ec0f27c9dcf6d": "glibc: 2.42-67 -> 2.42-84, fixes CVE-2026-6368 & CVE-2026-6791\n\nCloses #551399\nCloses #551398\n\nThe most recent fixes from #537324 are now part of the 2.42 branch."
+    },
+    "CVE-2026-6791": {
+      "3c20b5309bae95ca6b6cd3d2f8ce92ddb87a4b08": "glibc: 2.42-67 -> 2.42-84, fixes CVE-2026-6368 & CVE-2026-6791\n\nCloses #551399\nCloses #551398\n\nThe most recent fixes from #537324 are now part of the 2.42 branch.\n\n(cherry picked from commit 90c611df0c285d56480c5aa72d2ec0f27c9dcf6d)",
+      "9507691c9380554a38c606868963a65d5bb08ab7": "glibc: 2.42-67 -> 2.42-84, fixes CVE-2026-6368 & CVE-2026-6791 (#553328)",
+      "90c611df0c285d56480c5aa72d2ec0f27c9dcf6d": "glibc: 2.42-67 -> 2.42-84, fixes CVE-2026-6368 & CVE-2026-6791\n\nCloses #551399\nCloses #551398\n\nThe most recent fixes from #537324 are now part of the 2.42 branch."
+    },
     "CVE-2026-73030": {
       "c69ae8fb8faeb3472fd11234ba55a70ac3601f9b": "[26.05] python3Packages.unearth: fix CVE-2026-73030 (#552441)",
       "360007500cf322ea43cf4fbf50247058d8dfcb10": "python3Packages.unearth: fix CVE-2026-73030\n\nApply upstream path normalization and symlink target validation to prevent tar archives from writing outside the extraction directory.\n\nhttps://redirect.github.com/frostming/unearth/commit/6c78164e7bfa28b8b3d6f247b87e560692e3c8ba\n\nAssisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)\n(cherry picked from commit a34877a5d64ecf457971af72c6dd5f5858320eee)",