Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
843369b5 by Salvatore Bonaccorso at 2026-01-08T22:54:31+01:00
Add CVE-2026-21876/modsecurity-crs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -83,7 +83,10 @@ CVE-2026-21885 (Miniflux 2 is an open source feed reader.
Prior to version 2.2.1
NOTE:
https://github.com/miniflux/v2/security/advisories/GHSA-xwh2-742g-w3wp
NOTE: Fixed by:
https://github.com/miniflux/v2/commit/6c83e8c477b4d476aee5fbb87e47472c9ded01de
(v2.2.16)
CVE-2026-21876 (The OWASP core rule set (CRS) is a set of generic attack
detection rul ...)
- TODO: check
+ - modsecurity-crs <unfixed>
+ NOTE:
https://github.com/coreruleset/coreruleset/security/advisories/GHSA-36fv-25j3-r2c5
+ NOTE: Fixed by (merge):
https://github.com/coreruleset/coreruleset/commit/80d80473abf71bd49bf6d3c1ab221e3c74e4eb83
(v3.3.8)
+ NOTE: Fixed by (merge):
https://github.com/coreruleset/coreruleset/commit/9917985de09a6cf38b3261faf9105e909d67a7d6
(v4.22.0)
CVE-2026-21874 (NiceGUI is a Python-based UI framework. From versions v2.10.0
to 3.4.1 ...)
NOT-FOR-US: NiceGUI
CVE-2026-21873 (NiceGUI is a Python-based UI framework. From versions 2.22.0
to 3.4.1, ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/843369b58fe9e97942b573550ad117e67d13ff06
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/843369b58fe9e97942b573550ad117e67d13ff06
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
