Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
15659621 by Salvatore Bonaccorso at 2026-08-25T15:44:22+02:00
Add CVE-2026-75509/joserfc
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -123,7 +123,9 @@ CVE-2026-75554 (Insufficient Session Expiration
vulnerability in the OAuth token
CVE-2026-75542 (Incorrect Authorization vulnerability in the OAuth token
endpoint in h ...)
TODO: check
CVE-2026-75509 (joserfc is a Python library that provides an implementation of
several ...)
- TODO: check
+ - joserfc 1.7.3-1
+ NOTE:
https://github.com/authlib/joserfc/security/advisories/GHSA-r74j-q665-7rpj
+ NOTE: Fixed by:
https://github.com/authlib/joserfc/commit/76ee6a59bf5773c0af00b99076c5e199031f97f1
(1.7.3)
CVE-2026-75464 (OneNav 1.2.4 contains an authenticated arbitrary file deletion
vulnera ...)
NOT-FOR-US: OneNav
CVE-2026-75369 (An out-of-bounds read vulnerability in the
CAN::Application::parsePerf ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1565962155165212dbf7ce3a31172a6a04833a50
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1565962155165212dbf7ce3a31172a6a04833a50
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
