Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e28bd191 by Moritz Muehlenhoff at 2026-08-12T17:08:23+02:00
new libvirt issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2527,7 +2527,9 @@ CVE-2026-66761 (SAP Approuter does not enforce sufficient
flow control in certai
CVE-2026-66760 (SAP Approuter does not correctly validate client certificates
in certa ...)
NOT-FOR-US: SAP
CVE-2026-63622 (A flaw was found in libvirt. A local attacker, specifically a
process ...)
- TODO: check
+ - libvirt <unfixed>
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2513065
+ NOTE:
https://gitlab.com/libvirt/libvirt/-/commit/801160fd414ca2cc402bc01ead09b7ed4c3b8f5b
CVE-2026-5304 (An ACAP configuration file lacks input validation, which could
potenti ...)
NOT-FOR-US: Axis Communication
CVE-2026-5303 (The ACAP framework contains a Time-of-Check to Time-of-Use
(TOCTOU) ra ...)
@@ -2958,7 +2960,9 @@ CVE-2026-64941 (URL Redirection to Untrusted Site ('Open
Redirect') vulnerabilit
CVE-2026-64940 (Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi
Factory contai ...)
NOT-FOR-US: Nishishi Factory
CVE-2026-63623 (A flaw was found in libvirt. During storage volume clone or
convert op ...)
- TODO: check
+ - libvirt <unfixed>
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2513066
+ NOTE:
https://gitlab.com/libvirt/libvirt/-/commit/69335a484768d550854da1133d5490074695e825
CVE-2026-63106 (ReadyEcommerce before 4.5.2 contains an unauthenticated SQL
injection ...)
NOT-FOR-US: ReadyEcommerceCrafty Controller
CVE-2026-63105 (ReadyEcommerce before 4.5.2 contains a stored cross-site
scripting (XS ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e28bd19105cb877f0f43804429ac32beacbda790
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e28bd19105cb877f0f43804429ac32beacbda790
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
