Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e8589e6b by Salvatore Bonaccorso at 2026-08-08T11:10:40+02:00
Update status on two stunnel4 issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2934,13 +2934,13 @@ CVE-2026-70370 (Koha's reports/catalogue_stats.pl
builds dynamic SQL in sub calc
CVE-2026-70369 (Koha's reports/acquisitions_stats.pl builds its per-cell
statistics qu ...)
NOT-FOR-US: Koha Library Management System
CVE-2026-70368 (A stack-based out-of-bounds read vulnerability exists in the
"s_vlog" ...)
- - stunnel <unfixed>
+ - stunnel 3:5.80-1
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2462029
- TODO: check, AI generated report, unclear status (upstream)
+ NOTE: https://www.stunnel.org/CVE-2026-70368.html
CVE-2026-70367 (A Server-Side Request Forgery (SSRF) bypass vulnerability
exists in \u ...)
- - stunnel <unfixed>
+ - stunnel 3:5.80-1
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2462083
- TODO: check, unclear upstream status, AI generated report
+ NOTE: https://www.stunnel.org/CVE-2026-70367.html
CVE-2026-69704 (Atals-Livre contains a SQL injection vulnerability that allows
attacke ...)
NOT-FOR-US: Atals-Livre
CVE-2026-69703 (Atlas-Livre contains an improper access control vulnerability
in the a ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e8589e6b9e8013c400b3f8f2244f256d7f636731
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e8589e6b9e8013c400b3f8f2244f256d7f636731
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
