Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f788f717 by Salvatore Bonaccorso at 2026-05-20T21:35:16+02:00
Add CVE-2026-9064/389-ds-base
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -12,7 +12,9 @@ CVE-2026-9084 (MISP\u2019s OIDC authentication plugin allowed
automatic linking
CVE-2026-9065 (SureCart version prior to 4.2.1 are vulnerable to authenticated
SQL in ...)
NOT-FOR-US: SureCart
CVE-2026-9064 (A flaw was found in 389-ds-base. The
get_ldapmessage_controls_ext() fu ...)
- TODO: check
+ - 389-ds-base <unfixed>
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2480093
+ TODO: check upstream status
CVE-2026-9059 (NextGEN Gallery version prior to 4.2.1 are vulnerable to
authenticated ...)
NOT-FOR-US: NextGEN Gallery
CVE-2026-8598 (An undocumented configuration export port is accessible on some
models ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f788f7174e7dd1e23c1ff0eeb62c877c17e76968
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f788f7174e7dd1e23c1ff0eeb62c877c17e76968
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
