Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
cd3dec5e by Salvatore Bonaccorso at 2026-07-20T22:23:37+02:00
Add CVE-2026-39879/syslog-ng
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -216,7 +216,12 @@ CVE-2026-42210 (Webmin is a web-based system
administration tool for Unix-like s
CVE-2026-40187 (In egroupware version 26.0 and earlier, an authenticated
administrator ...)
- egroupware <removed>
CVE-2026-39879 (Due to a missing sanitization call in
[`afsql_dd_run_query`](https://g ...)
- TODO: check
+ - syslog-ng <unfixed>
+ NOTE:
https://github.com/syslog-ng/syslog-ng/security/advisories/GHSA-qwf9-6222-m24m
+ NOTE:
https://github.com/syslog-ng/syslog-ng/commit/1e872e301436efa5d3fcd54e7628ac82c57698d2
(syslog-ng-4.12.0)
+ NOTE:
https://github.com/syslog-ng/syslog-ng/commit/1aba7537f0c406090f98a649475acbf517440220
(syslog-ng-4.12.0)
+ NOTE:
https://github.com/syslog-ng/syslog-ng/commit/4b61a0b1dad69368bc3b93b607141708d0036830
(syslog-ng-4.12.0)
+ NOTE:
https://github.com/syslog-ng/syslog-ng/commit/4c0aebf7a1c0a8177bdf4fb67803e19dddc3dbf2
(syslog-ng-4.12.0)
CVE-2026-39878 (Chamilo LMS versions 1.11.38 and earlier contain a stored
cross-site s ...)
NOT-FOR-US: Chamilo LMS
CVE-2026-39385 (Frappe LMS is an open source learning management system. In
version 2. ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd3dec5e54ba1be5a7577c5e4a79b65b5b0fe7d9
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd3dec5e54ba1be5a7577c5e4a79b65b5b0fe7d9
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits