Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
c2df4086 by Salvatore Bonaccorso at 2026-05-13T23:05:42+02:00
Add Debian bug reference for jq issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1811,7 +1811,7 @@ CVE-2026-44992 (OpenClaw versions 2026.4.5 before
2026.4.20 contain an environme
CVE-2026-44991 (OpenClaw before 2026.4.21 contains an authorization bypass
vulnerabili ...)
NOT-FOR-US: OpenClaw
CVE-2026-44777 (jq is a command-line JSON processor. In 1.8.2rc1 and earlier,
the ordi ...)
- - jq <unfixed>
+ - jq <unfixed> (bug #1136445)
NOTE:
https://github.com/jqlang/jq/security/advisories/GHSA-rmpv-jgvr-wpr9
CVE-2026-44738 (Grav is a file-based Web platform. Prior to 2.0.0-rc.2, the
Twig sandb ...)
NOT-FOR-US: Grav CMS
@@ -1850,13 +1850,13 @@ CVE-2026-43968 (Improper Neutralization of CRLF
Sequences ('CRLF Injection') vul
NOTE: https://osv.dev/vulnerability/EEF-CVE-2026-43968
NOTE:
https://github.com/ninenines/cowlib/commit/6165fc40efa159ba1cceee7e7981e790acba5d9c
CVE-2026-43896 (jq is a command-line JSON processor. In 1.8.1 and earlier,
unbounded r ...)
- - jq <unfixed>
+ - jq <unfixed> (bug #1136445)
NOTE:
https://github.com/jqlang/jq/security/advisories/GHSA-mg96-6h3q-g846
CVE-2026-43895 (jq is a command-line JSON processor. In 1.8.1 and earlier, jq
accepts ...)
- - jq <unfixed>
+ - jq <unfixed> (bug #1136445)
NOTE:
https://github.com/jqlang/jq/security/advisories/GHSA-7q7g-mrq3-phxr
CVE-2026-43894 (jq is a command-line JSON processor. In 1.8.1 and earlier,
when decNum ...)
- - jq <unfixed>
+ - jq <unfixed> (bug #1136445)
NOTE:
https://github.com/jqlang/jq/security/advisories/GHSA-5v7p-2r57-2g4g
CVE-2026-43826 (The OpenSearch logging provider, when configured with a `host`
URL tha ...)
TODO: check
@@ -1925,10 +1925,10 @@ CVE-2026-41951 (Path traversal vulnerability exists in
GROWI v7.5.0 and earlier,
CVE-2026-41431 (Zen is a firefox-based browser. Prior to 1.19.9b, Zen Browser
ships a ...)
TODO: check
CVE-2026-41257 (jq is a command-line JSON processor. In 1.8.1 and earlier, the
jq byte ...)
- - jq <unfixed>
+ - jq <unfixed> (bug #1136445)
NOTE:
https://github.com/jqlang/jq/security/advisories/GHSA-4jm8-m363-4539
CVE-2026-41256 (jq is a command-line JSON processor. In 1.8.1 and earlier,
Top-level j ...)
- - jq <unfixed>
+ - jq <unfixed> (bug #1136445)
NOTE:
https://github.com/jqlang/jq/security/advisories/GHSA-vf2h-chrj-q3fg
CVE-2026-41250 (Taiga is a project management platform for startups and agile
develope ...)
TODO: check
@@ -1937,7 +1937,7 @@ CVE-2026-41018 (The Elasticsearch logging provider, when
configured with a `host
CVE-2026-40636 (Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale
version ...)
NOT-FOR-US: Dell / EMC
CVE-2026-40612 (jq is a command-line JSON processor. In 1.8.1 and earlier,
jv_contains ...)
- - jq <unfixed>
+ - jq <unfixed> (bug #1136445)
NOTE:
https://github.com/jqlang/jq/security/advisories/GHSA-r7m6-x9c7-h69j
CVE-2026-3609 (Wellbia's XIGNCODE3 xhunter1.sys kernel driver Privilege
Escalation Vu ...)
TODO: check
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c2df4086ad6557a6718fe9a12cb425dd30cd18a6
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c2df4086ad6557a6718fe9a12cb425dd30cd18a6
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
