Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e1f89a8a by Salvatore Bonaccorso at 2026-07-27T09:45:40+02:00
Add xmlrpc-c issue (CVE-2026-15928)
Blog-reference from reporters does not work (at time of commit) and
needs research from upstream status.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -11,7 +11,8 @@ CVE-2026-17500 (A vulnerability was detected in ggml-org
llama.cpp d006858/e15ef
NOTE: https://github.com/ggml-org/llama.cpp/issues/25284
NOTE: https://github.com/ggml-org/llama.cpp/pull/25308
CVE-2026-15928 (XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable
to a ref ...)
- TODO: check
+ - xmlrpc-c <unfixed>
+ TODO: check upstream status
CVE-2026-14827 (The Calendar WordPress plugin before 1.3.18 does not properly
escape a ...)
NOT-FOR-US: WordPress plugin
CVE-2026-14820 (The Quiz and Survey Master (QSM) WordPress plugin before
11.1.3 does ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e1f89a8a3badbeea01e8a42d7974d1586915da3f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e1f89a8a3badbeea01e8a42d7974d1586915da3f
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
