Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b626ac83 by Salvatore Bonaccorso at 2026-07-23T09:32:11+02:00
Add two new kibana issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2646,9 +2646,9 @@ CVE-2026-56745 (Netty is a network application framework
for development of prot
NOTE: Fixed by:
https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b
(netty-4.2.16.Final)
NOTE: Fixed by:
https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6
(netty-4.1.136.Final)
CVE-2026-56147 (Authorization Bypass Through User-Controlled Key (CWE-639) in
Kibana c ...)
- TODO: check
+ - kibana <itp> (bug #700337)
CVE-2026-56146 (Improper Access Control (CWE-284) in Kibana can lead to
unauthorized m ...)
- TODO: check
+ - kibana <itp> (bug #700337)
CVE-2026-56145 (Uncontrolled Resource Consumption (CWE-400) in Elasticsearch
can lead ...)
NOT-FOR-US: Elasticsearch
CVE-2026-56144 (Incorrect Authorization (CWE-863) in Elasticsearch can allow
an authen ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b626ac838fd476e3d1aa26b60a74fa7d171e3d49
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b626ac838fd476e3d1aa26b60a74fa7d171e3d49
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
