Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
5380d4e3 by Salvatore Bonaccorso at 2026-07-18T22:54:27+02:00
Add CVE-2026-44722/pyzipper
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -537,7 +537,9 @@ CVE-2026-45703 (Pimcore is an Open Source Data & Experience
Management Platform.
CVE-2026-45162 (Pimcore is an Open Source Data & Experience Management
Platform. Prior ...)
NOT-FOR-US: Pimcore
CVE-2026-44722 (pyzipper is a replacement for Python's zipfile that can read
and write ...)
- TODO: check
+ - python-pyzipper <unfixed>
+ NOTE:
https://github.com/danifus/pyzipper/security/advisories/GHSA-crqm-m339-7m2p
+ NOTE: Fixed by;
https://github.com/danifus/pyzipper/commit/93ce88e7dfd1635443197dab3fb8d477cff579ae
(v0.4.0)
CVE-2026-22104 (Improper access control in Hashtopolis server web-interface
chunk acti ...)
TODO: check
CVE-2026-21764 (HCL DevOps Loop is affected by insufficient input validation
that allo ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5380d4e38efdc8bcd02c6571479f6cd2d822b8ef
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5380d4e38efdc8bcd02c6571479f6cd2d822b8ef
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
