Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
bb146297 by Salvatore Bonaccorso at 2026-08-22T21:56:07+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -41,9 +41,9 @@ CVE-2026-76596 (Joomla Extension - fabrikar.com -
Unauthenticated table truncati
CVE-2026-76571 (Joomla Extension - fabrikar.com - Unauthenticated SQL
injection in lis ...)
NOT-FOR-US: Joomla
CVE-2026-75870 (Punk versions before 0.18 for Perl allow session cookie
forgery via an ...)
- TODO: check
+ NOT-FOR-US: Punk
CVE-2026-75866 (Punk::OAuth2::Server versions through 0.03 for Perl issue
access token ...)
- TODO: check
+ NOT-FOR-US: Punk::OAuth2::Server Perl module
CVE-2026-71514 (NLTK 3.9.4 through 3.10.2 contains a path traversal
vulnerability in C ...)
- nltk 3.10.3-1
NOTE: Fixed by:
https://github.com/nltk/nltk/commit/10d34b3f4fe3fec74b76527a409eb0acbac2e8ab
(v3.10.3-rc1)
@@ -104,9 +104,9 @@ CVE-2026-62383 (nltk versions before 3.10.2 contain a
symlink-based arbitrary fi
- nltk 3.10.3-1
NOTE:
https://github.com/nltk/nltk/security/advisories/GHSA-3hhw-38pf-pxj6
CVE-2026-62382 (PasswordPusher versions v1.45.11 through v2.9.5 contain an
improper au ...)
- TODO: check
+ NOT-FOR-US: PasswordPusher
CVE-2026-62381 (luci-lib-px5g (LuCI) contains a heap-based buffer overflow in
the nati ...)
- TODO: check
+ NOT-FOR-US: luci-lib-px5g (LuCI)
CVE-2026-62380 (Netty (io.netty:netty-codec-socks) versions 4.2.0.Final
through 4.2.16 ...)
TODO: check
CVE-2026-62243 (Netty (io.netty:netty-handler) versions from 4.2.0.Final
through 4.2.1 ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bb146297bc06997d9bd5e860f4c01f4c3799658f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bb146297bc06997d9bd5e860f4c01f4c3799658f
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
