Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2b8d51f1 by Salvatore Bonaccorso at 2026-08-07T22:36:58+02:00
Process two new pymdown-extensions issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -427,7 +427,9 @@ CVE-2026-67621 (Flowise through 3.1.4 contains a missing
authorization vulnerabi
CVE-2026-67434 (PHP_CodeSniffer tokenizes PHP files and detects violations of
a define ...)
NOT-FOR-US: PHP_CodeSniffer
CVE-2026-67422 (pymdown-extensions is a collection of extensions for the
Python Markdo ...)
- TODO: check
+ - pymdown-extensions 11.0.1-1
+ NOTE:
https://github.com/facelessuser/pymdown-extensions/security/advisories/GHSA-gm37-52c6-37mw
+ NOTE: Fixed by:
https://github.com/facelessuser/pymdown-extensions/commit/c68498598d7b13011bb4571350b6e3612a4ce44b
(11.0.1)
CVE-2026-65668 (Improper access control in Microsoft Purview eDiscovery allows
an auth ...)
NOT-FOR-US: Microsoft
CVE-2026-65667 (Missing authorization in Microsoft Teams allows an
unauthorized attack ...)
@@ -471,7 +473,8 @@ CVE-2026-62836 (Improper restriction of communication
channel to intended endpoi
CVE-2026-62830 (Missing authorization in Azure SRE Agent allows an authorized
attacker ...)
NOT-FOR-US: Microsoft
CVE-2026-61632 (PyMdown Extensions is a set of extensions for the
Python-Markdown mark ...)
- TODO: check
+ - pymdown-extensions 11.0.1-1
+ NOTE:
https://github.com/facelessuser/pymdown-extensions/security/advisories/GHSA-9xwg-3r6f-jcx2
CVE-2026-5857 (Contiki-NG's MQTT client parse_publish_vhdr() in
os/net/app-layer/mqtt ...)
NOT-FOR-US: Contiki-NG
CVE-2026-5856 (Contiki-NG's DNS/mDNS resolver skip_name() in
os/services/resolv/resol ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2b8d51f1d12d12ea9ff06cbf093b07e02637cc31
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2b8d51f1d12d12ea9ff06cbf093b07e02637cc31
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
