Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
330d8300 by Salvatore Bonaccorso at 2026-08-30T06:41:41+02:00
Update status for CVE-2026-78002/rsyslog
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2301,9 +2301,11 @@ CVE-2026-78260 (Unauthenticated SQL Injection in Epayco
<= 8.4.6 versions.)
CVE-2026-78257 (Contributor PHP Object Injection in Booking and Rental Manager
<= 2.7. ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-78002 (A flaw was found in rsyslog. An unauthenticated remote
attacker can tr ...)
- - rsyslog <unfixed> (bug #1145980)
+ - rsyslog 8.2608.0-4 (bug #1145980)
[trixie] - rsyslog <no-dsa> (Minor issue)
NOTE:
https://github.com/rsyslog/rsyslog/security/advisories/GHSA-g72f-gc6v-f2w3
+ NOTE: https://github.com/rsyslog/rsyslog/pull/7525
+ NOTE:
https://github.com/rsyslog/rsyslog/commit/667e3f61aec5ee02c5c2ee6f0f8accf6fe4301a9
CVE-2026-75871 (GitLab has remediated a vulnerability in the GitLab AI Gateway
compone ...)
NOT-FOR-US: GitLab (used to be packaged in the Debian archive as
src:gitlab, but never in a stable release)
CVE-2026-75573 (In MongoDB Connector for BI, mongodrdl may write a TLS
private-key pas ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/330d8300695308ecad0cfb71e01858de44513e69
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/330d8300695308ecad0cfb71e01858de44513e69
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
