Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0fbd3904 by Salvatore Bonaccorso at 2026-08-12T06:31:11+02:00
Track fixed version via unstable for CVE-2026-66738/spip
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2363,7 +2363,7 @@ CVE-2026-6368 (Calling wordexp with WRDE_APPEND in the
GNU C Library version 2.0
CVE-2026-66915 (Joomla Extension - fabrikar.com - Remote code execution in
Fabrik < 4. ...)
NOT-FOR-US: Joomla
CVE-2026-66738 (SPIP before 4.4.18 contains a code injection vulnerability in
SQLite-b ...)
- - spip <unfixed>
+ - spip 4.4.18+dfsg-1
NOTE:
https://blog.spip.net/Mise-a-jour-critique-de-securite-sortie-de-SPIP-4-4-18.html
CVE-2026-66642 (Cross-Site Request Forgery (CSRF) vulnerability in WP Umbrella
allows ...)
NOT-FOR-US: WordPress plugin or theme
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0fbd3904c39c62a852112c4ffd26e3ddf8ccf74d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0fbd3904c39c62a852112c4ffd26e3ddf8ccf74d
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
