Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
fc5c0240 by Salvatore Bonaccorso at 2026-07-10T10:30:08+02:00
Add CVE-2026-59818/etcd
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -736,7 +736,14 @@ CVE-2026-59820 (LiteLLM is a proxy server (AI Gateway) to
call LLM APIs in OpenA
CVE-2026-59819 (LiteLLM is a proxy server (AI Gateway) to call LLM APIs in
OpenAI (or ...)
NOT-FOR-US: LiteLLM
CVE-2026-59818 (etcd is a distributed key-value store for the data of a
distributed sy ...)
- TODO: check
+ - etcd <unfixed>
+ NOTE:
https://github.com/etcd-io/etcd/security/advisories/GHSA-3wh4-j44w-pg92
+ NOTE: https://github.com/etcd-io/etcd/pull/22007
+ NOTE: https://github.com/etcd-io/etcd/pull/22021
+ NOTE: https://github.com/etcd-io/etcd/pull/22025
+ NOTE:
https://github.com/etcd-io/etcd/commit/2308ce1578064641d4d67c40f0487309267d1bef
(main)
+ NOTE:
https://github.com/etcd-io/etcd/commit/8221ae82bc25d4d55ca64382207b69be71038cbb
(v3.6.13)
+ NOTE:
https://github.com/etcd-io/etcd/commit/24838af5a53dd0245adced920e42a9bf0e7a267f
(v3.5.32)
CVE-2026-59807 (Composio SDK before 0.2.32-beta.283 contains a path validation
bypass ...)
NOT-FOR-US: Composio SDK
CVE-2026-59806 (Gradio before 6.20.0 contains an open redirect and server-side
request ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc5c0240ba2f530db949c1d2a76a29e59a27a0a3
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc5c0240ba2f530db949c1d2a76a29e59a27a0a3
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
