Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
41f22303 by Salvatore Bonaccorso at 2026-07-16T21:07:55+02:00
Add new tomcat issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -887,9 +887,21 @@ CVE-2026-59197 (Pillow is a Python imaging library. Prior
to 12.3.0, Pillow's pu
NOTE: https://github.com/python-pillow/Pillow/pull/9695
NOTE: Fixed by:
https://github.com/python-pillow/Pillow/commit/cce3bdb867c77a3420261ed1bfdb6b0787ec8fc1
(12.3.0)
CVE-2026-59084 (Insufficient Technical Documentation vulnerability in Apache
Tomcat si ...)
- TODO: check
+ - tomcat11 <unfixed>
+ - tomcat10 <unfixed>
+ - tomcat9 9.0.70-2
+ NOTE: Starting with 9.0.70-2 src:tomcat9 no longer ships the server
stack, using that as the fixed version
+ NOTE:
https://github.com/apache/tomcat/commit/57e80e9b8bb7cb563929db47fd24fe787251f478
(11.0.24)
+ NOTE:
https://github.com/apache/tomcat/commit/79466463f18cf57704513a5aaa93961bf14c9ef5
(10.1.57)
+ NOTE:
https://github.com/apache/tomcat/commit/617d7275782bf58b45f6b7ea82c2edf16660e0b3
(9.0.120)
CVE-2026-59083 (Improper Handling of URL Encoding (Hex Encoding) vulnerability
in Apac ...)
- TODO: check
+ - tomcat11 <unfixed>
+ - tomcat10 <unfixed>
+ - tomcat9 9.0.70-2
+ NOTE: Starting with 9.0.70-2 src:tomcat9 no longer ships the server
stack, using that as the fixed version
+ NOTE:
https://github.com/apache/tomcat/commit/f00ab28725a18c7fffda421e9858c27badcac1e4
(11.0.24)
+ NOTE:
https://github.com/apache/tomcat/commit/04e9ec3d32209faa26ca6c23ebd9ad514690aec0
(10.1.57)
+ NOTE:
https://github.com/apache/tomcat/commit/a520aecb325e2279f2bf3a7a090ca7f61ed1c7af
(9.0.120)
CVE-2026-58647 (Improper neutralization of input during web page generation
('cross-si ...)
NOT-FOR-US: Microsoft
CVE-2026-58644 (Deserialization of untrusted data in Microsoft Office
SharePoint allow ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/41f223033c4f8571d5baece19385dd17e4ea746d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/41f223033c4f8571d5baece19385dd17e4ea746d
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
