Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
44b458d5 by Salvatore Bonaccorso at 2026-08-29T22:19:11+02:00
Add CVE-2026-82457/su-exec
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -47,7 +47,7 @@ CVE-2026-82461 (pac4j-oidc before 6.5.6 fails to verify
access token signatures,
CVE-2026-82460 (Cloud Commander before 19.20.2 contains a directory traversal
vulnerab ...)
TODO: check
CVE-2026-82457 (su-exec through 0.3 fails to validate numeric user and group
identifie ...)
- TODO: check
+ - su-exec <itp> (bug #1003059)
CVE-2026-82456 (argocd-mcp 0.8.0 binds its HTTP transport to every network
interface a ...)
NOT-FOR-US: Argo CD
CVE-2026-82455 (RubyGems fails to re-validate path containment after
filesystem symlin ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/44b458d5a13b64805da4bd5b5f070d1349100387
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/44b458d5a13b64805da4bd5b5f070d1349100387
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
