Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
37fb1294 by Salvatore Bonaccorso at 2026-07-19T07:50:28+02:00
Track fixes for two nginx issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1738,7 +1738,7 @@ CVE-2026-60065 (When NGINX Plus is configured to use the
Message Queuing Telemet
CVE-2026-60062 (The NGINX Agent config_dirsdirective allows a low-privileged
attacker ...)
NOT-FOR-US: F5
CVE-2026-60005 (NGINX Plus and NGINX Open Source have a vulnerability in the
ngx_http_ ...)
- - nginx <unfixed>
+ - nginx 1.30.1-7
NOTE: https://my.f5.com/manage/s/article/K000162100
CVE-2026-59955 (Apollo is a reliable configuration management system suitable
for micr ...)
NOT-FOR-US: Apollo
@@ -1812,7 +1812,7 @@ CVE-2026-56699 (Wazuh Manager before 5.0.0-beta3 fails to
escape the DataValue.i
CVE-2026-56687 (Dell ThinOS 10, versions prior to 2605_10.2100, contain an
Obsolete Fe ...)
NOT-FOR-US: Dell / EMC
CVE-2026-56434 (NGINX Plus and NGINX Open Source have a vulnerability in the
ngx_http_ ...)
- - nginx <unfixed>
+ - nginx 1.30.1-7
NOTE: https://my.f5.com/manage/s/article/K000162098
CVE-2026-56400 (open-webui before 0.3.14 contains a cross-origin resource
sharing misc ...)
NOT-FOR-US: open-webui
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/37fb12940c64b4ea9fd2ab20c01be14efeccf02f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/37fb12940c64b4ea9fd2ab20c01be14efeccf02f
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
