Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
9702f388 by Moritz Muehlenhoff at 2026-07-07T11:30:08+02:00
new optee-os issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -58,7 +58,9 @@ CVE-2026-54709
CVE-2026-54234 (vLLM is a high-throughput and memory-efficient inference and
serving e ...)
- vllm <itp> (bug #1095237)
CVE-2026-53763 (OP-TEE is a Trusted Execution Environment (TEE) designed as
companion ...)
- TODO: check
+ - optee-os <unfixed>
+ [trixie] - optee-os <no-dsa> (Minor issue)
+ NOTE:
https://github.com/OP-TEE/optee_os/security/advisories/GHSA-fcm8-vjhf-6vqh
CVE-2026-53648 (FOSSBilling is a free, open-source billing and client
management syste ...)
NOT-FOR-US: FOSSBilling
CVE-2026-53647 (FOSSBilling is a free, open-source billing and client
management syste ...)
@@ -94,7 +96,9 @@ CVE-2026-4375 (The DoLeads Integrator WordPress plugin
through 0.65, wp2epub Wor
CVE-2026-48267 (DNG SDK versions 1.7.1 2536 and earlier are affected by a NULL
Pointer ...)
NOT-FOR-US: Adobe
CVE-2026-44362 (OP-TEE is a Trusted Execution Environment (TEE) designed as
companion ...)
- TODO: check
+ - optee-os <unfixed>
+ [trixie] - optee-os <no-dsa> (Minor issue)
+ NOTE:
https://github.com/OP-TEE/optee_os/security/advisories/GHSA-fhcg-pp56-8v75
CVE-2026-43928 (FOSSBilling is a free, open-source billing and client
management syste ...)
NOT-FOR-US: FOSSBilling
CVE-2026-43927 (FOSSBilling is a free, open-source billing and client
management syste ...)
@@ -106,7 +110,9 @@ CVE-2026-43921 (FOSSBilling is a free, open-source billing
and client management
CVE-2026-43918 (FOSSBilling is a free, open-source billing and client
management syste ...)
NOT-FOR-US: FOSSBilling
CVE-2026-42546 (OP-TEE is a Trusted Execution Environment (TEE) designed as
companion ...)
- TODO: check
+ - optee-os <unfixed>
+ [trixie] - optee-os <no-dsa> (Minor issue)
+ NOTE:
https://github.com/OP-TEE/optee_os/security/advisories/GHSA-c7j8-fgqw-rcgp
CVE-2026-42341 (FOSSBilling is a free, open-source billing and client
management syste ...)
NOT-FOR-US: FOSSBilling
CVE-2026-42331 (FOSSBilling is a free, open-source billing and client
management syste ...)
@@ -132,11 +138,17 @@ CVE-2026-42143 (Coolify is an open-source and
self-hostable tool for managing se
CVE-2026-41899 (Coolify is an open-source and self-hostable tool for managing
servers, ...)
NOT-FOR-US: Coolify
CVE-2026-41516 (OP-TEE is a Trusted Execution Environment (TEE) designed as
companion ...)
- TODO: check
+ - optee-os <unfixed>
+ [trixie] - optee-os <no-dsa> (Minor issue)
+ NOTE:
https://github.com/OP-TEE/optee_os/security/advisories/GHSA-wxp6-8wwr-h4gf
CVE-2026-41515 (OP-TEE is a Trusted Execution Environment (TEE) designed as
companion ...)
- TODO: check
+ - optee-os <unfixed>
+ [trixie] - optee-os <no-dsa> (Minor issue)
+ NOTE:
https://github.com/OP-TEE/optee_os/security/advisories/GHSA-5q45-58r5-cq4g
CVE-2026-41514 (OP-TEE is a Trusted Execution Environment (TEE) designed as
companion ...)
- TODO: check
+ - optee-os <unfixed>
+ [trixie] - optee-os <no-dsa> (Minor issue)
+ NOTE:
https://github.com/OP-TEE/optee_os/security/advisories/GHSA-qw4r-9wj9-q23r
CVE-2026-38979 (ajenti through v2.2.13 has a clickjacking weakness in the
browser-faci ...)
NOT-FOR-US: ajenti
CVE-2026-38976 (mrubyc through 3.4.1 was found to contain a NULL pointer
dereference i ...)
@@ -441,11 +453,15 @@ CVE-2026-43825 (Untrusted Java Deserialization in Apache
OpenNLP SvmDoccatModel
CVE-2026-42527 (Deserialization of Untrusted Data vulnerability in Apache
Camel. The ...)
NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-41434 (OP-TEE is a Trusted Execution Environment (TEE) designed as
companion ...)
- TODO: check
+ - optee-os <unfixed>
+ [trixie] - optee-os <no-dsa> (Minor issue)
+ NOTE:
https://github.com/OP-TEE/optee_os/security/advisories/GHSA-wh38-23ff-grff
CVE-2026-40859 (Deserialization of Untrusted Data vulnerability in Apache
Camel. The ...)
NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-40257 (OP-TEE is a Trusted Execution Environment (TEE) designed as
companion ...)
- TODO: check
+ - optee-os <unfixed>
+ [trixie] - optee-os <no-dsa> (Minor issue)
+ NOTE:
https://github.com/OP-TEE/optee_os/security/advisories/GHSA-75x4-j8p9-55qv
CVE-2026-40141 (A high-severity vulnerability exists in a web application
component of ...)
NOT-FOR-US: BeyondTrust
CVE-2026-40140 (BeyondTrust Remote Support and Privileged Remote Access
contain a high ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9702f3885acb4d767aaf7e5c992cac549487cc14
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9702f3885acb4d767aaf7e5c992cac549487cc14
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
