Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e307c4f0 by Salvatore Bonaccorso at 2026-03-16T19:06:21+01:00
Add CVE-2026-28384/incus
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1101,7 +1101,11 @@ CVE-2026-28792 (Tina is a headless content management
system. Prior to 2.1.8 , t
CVE-2026-28791 (Tina is a headless content management system. Prior to 2.1.7,
a path t ...)
NOT-FOR-US: Tina CMS (different from src:tina)
CVE-2026-28384 (An improper sanitization of the compression_algorithm
parameter in Can ...)
- TODO: check
+ - incus 6.0.6-1
+ - lxd <removed>
+ NOTE:
https://github.com/lxc/incus/security/advisories/GHSA-x6jc-phwx-hp32
+ NOTE: https://github.com/canonical/lxd/pull/17820
+ NOTE: https://github.com/lxc/incus/pull/2972
CVE-2026-28256 (A Use of Hard-coded, Security-relevant Constants vulnerability
in Tran ...)
NOT-FOR-US: Trane Tracer
CVE-2026-28255 (A Use of Hard-coded Credentials vulnerability in Trane Tracer
SC, Trac ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e307c4f0b2792633e8b3d36c3dfc2798977c62ba
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e307c4f0b2792633e8b3d36c3dfc2798977c62ba
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
