Henri Salo pushed to branch master at Debian Security Tracker / security-tracker
Commits:
9527be1d by Henri Salo at 2026-08-13T17:55:01+03:00
Added mailing list urls
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1109,6 +1109,7 @@ CVE-2026-71290 (Improper TLS hostname verification
vulnerability in Apache HttpC
- httpcomponents-core5 <unfixed>
- httpcomponents-client <undetermined>
NOTE: https://lists.apache.org/thread/bhf7g2zwpom2ohvwjjjlonc93br2s8vq
+ NOTE: https://www.openwall.com/lists/oss-security/2026/08/13/6
TODO: check, claimed to affect only version 5.2 onwards
CVE-2026-70398 (A flaw was found in multicloud-integrations, a component of
Red Hat Ad ...)
NOT-FOR-US: Red Hat Advanced Cluster Management for Kubernetes
@@ -11167,6 +11168,7 @@ CVE-2026-64607 (HttpClient based on the classic i/o
model fails to correctly rel
- httpcomponents-client <undetermined>
- commons-httpclient <undetermined>
NOTE: https://lists.apache.org/thread/qqfzo3fqcdk4l5496vz95ppvl4ty511q
+ NOTE: https://www.openwall.com/lists/oss-security/2026/08/13/5
CVE-2026-59232 (Cross-site Scripting in the lead index view in Roskus Prospero
Flow CR ...)
NOT-FOR-US: Roskus Prospero Flow CRM
CVE-2026-59231 (Server-Side Request Forgery in the PDF export component in
maalfer Pen ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9527be1d6b5fce791501bfe851563e3f63b34ab4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9527be1d6b5fce791501bfe851563e3f63b34ab4
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
