Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
89d586c6 by security tracker role at 2026-02-17T08:12:55+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,19 @@
+CVE-2026-2592 (The Zarinpal Gateway for WooCommerce plugin for WordPress is
vulnerabl ...)
+ TODO: check
+CVE-2026-2439 (Concierge::Sessions versions from 0.8.1 before 0.8.5 for Perl
generate ...)
+ TODO: check
+CVE-2026-2002 (The Forminator Forms \u2013 Contact Form, Payment Form & Custom
Form B ...)
+ TODO: check
+CVE-2026-26220 (LightLLM version 1.1.0 and prior contain an unauthenticated
remote cod ...)
+ TODO: check
+CVE-2026-1657 (The EventPrime plugin for WordPress is vulnerable to
unauthorized imag ...)
+ TODO: check
+CVE-2026-0829 (The Frontend File Manager Plugin WordPress plugin through 23.5
allows ...)
+ TODO: check
+CVE-2025-15578 (Maypole versions from 2.10 through 2.13 for Perl generates
session ids ...)
+ TODO: check
+CVE-2025-12062 (The WP Maps \u2013 Store Locator,Google
Maps,OpenStreetMap,Mapbox,List ...)
+ TODO: check
CVE-2026-2604
- evolution-data-server <unfixed>
NOTE: https://gitlab.gnome.org/GNOME/evolution-data-server/-/issues/627
@@ -8,7 +24,7 @@ CVE-2026-2574
- glib-networking <unfixed> (unimportant)
NOTE: https://gitlab.gnome.org/GNOME/glib-networking/-/issues/228
NOTE: OpenSSL backend disabled by default upstream and in Debian
-CVE-2026-2474 [heap buffer overflow in the XS function
crypt_urandom_getrandom()]
+CVE-2026-2474 (Crypt::URandom versions from 0.41 before 0.55 for Perl is
vulnerable t ...)
- libcrypt-urandom-perl 0.55-1
[trixie] - libcrypt-urandom-perl <no-dsa> (Minor issue)
[bookworm] - libcrypt-urandom-perl <not-affected> (Vulnerable code
introduced later in 0.41)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/89d586c6529fe374119ee17fc13f4ecda41c3827
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/89d586c6529fe374119ee17fc13f4ecda41c3827
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
