Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f6955f97 by Salvatore Bonaccorso at 2026-06-29T21:28:51+02:00
Add two new spice-vdagent issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -7,9 +7,11 @@ CVE-2026-58000 (luci-proto-openvpn through 0.11.1, fixed in
commit e4ff45e, cont
CVE-2026-57999 (luci-app-tailscale-community contains a command injection
vulnerabilit ...)
NOT-FOR-US: luci-app-tailscale-community
CVE-2026-57966 (A path traversal vulnerability was found in spice-vdagent.
This flaw a ...)
- TODO: check
+ - spice-vdagent <unfixed>
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2493582
CVE-2026-57965 (A flaw was found in spice-vdagent. A malicious or compromised
SPICE ho ...)
- TODO: check
+ - spice-vdagent <unfixed>
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2493581
CVE-2026-57960 (Hi.Events through 1.9.0 public check-in list endpoints use
short_id as ...)
TODO: check
CVE-2026-57959 (Hi.Events through 1.9.0 contains a promo code validation
vulnerability ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f6955f9780c70c3f3399742bdb7907a1672661b8
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f6955f9780c70c3f3399742bdb7907a1672661b8
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
