Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
cb67e660 by Salvatore Bonaccorso at 2026-08-22T07:01:05+02:00
Update status for CVE-2026-18917/libvirt
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1214,7 +1214,8 @@ CVE-2026-19586 (A pre-authentication OS command injection
vulnerability has been
CVE-2026-18917 (A flaw was found in libvirt. An unprivileged local user could
exploit ...)
- libvirt <unfixed>
NOTE: https://gitlab.com/libvirt/libvirt/-/work_items/903
- NOTE:
https://gitlab.com/libvirt/libvirt/-/commit/5a62cbf2907d4590283597b46da9c0f41e7b4d4f
+ NOTE: Introduced with:
https://gitlab.com/libvirt/libvirt/-/commit/34f2d0319d2098c77c8cc27d8350616029125a2b
(v1.2.6-rc1)
+ NOTE: Fixed by:
https://gitlab.com/libvirt/libvirt/-/commit/5a62cbf2907d4590283597b46da9c0f41e7b4d4f
CVE-2026-18482 (Neo.mjs contains a command injection vulnerability within the
FileSyst ...)
TODO: check
CVE-2026-18309 (GIMP APNG File Parsing Integer Overflow Remote Code Execution
Vulnerab ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cb67e660b36b1dadee2848cb9d9ef201609e9fe5
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cb67e660b36b1dadee2848cb9d9ef201609e9fe5
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
