Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
79e4b23b by Salvatore Bonaccorso at 2026-04-03T12:02:42+02:00
Add two new trafficserver issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -581,9 +581,11 @@ CVE-2026-0686 (The Webmention plugin for WordPress is
vulnerable to Server-Side
CVE-2026-0634 (Code execution in AssistFeedbackService of TECNO Pova7 Pro 5G
on Andro ...)
NOT-FOR-US: TECNO Mobile
CVE-2025-65114 (Apache Traffic Server allows request smuggling if chunked
messages are ...)
- TODO: check
+ - trafficserver <unfixed>
+ NOTE: https://www.openwall.com/lists/oss-security/2026/04/02/6
CVE-2025-58136 (A bug in POST request handling causes a crash under a certain
conditio ...)
- TODO: check
+ - trafficserver <unfixed>
+ NOTE: https://www.openwall.com/lists/oss-security/2026/04/02/6
CVE-2025-43264 (The issue was addressed with improved memory handling. This
issue is f ...)
NOT-FOR-US: Apple
CVE-2025-43257 (This issue was addressed with improved handling of symlinks.
This issu ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/79e4b23b1689263a2cf2c4bdf99776dd1ca3c524
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/79e4b23b1689263a2cf2c4bdf99776dd1ca3c524
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
