Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: b5e25583 by Salvatore Bonaccorso at 2026-08-31T20:51:51+02:00 Update references for CVE-2026-18497 While https://github.com/nothings/stb/issues/1962 looks in releated area and might be a duplicate, CVE-2026-18497 is associated for https://www.kb.cert.org/vuls/id/987105 and https://github.com/nothings/stb/issues/1905 . - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -30044,9 +30044,9 @@ CVE-2026-19079 (A TOCTOU (Time-of-Check-Time-of-Use) race condition vulnerabilit [trixie] - policycoreutils <no-dsa> (Minor issue) NOTE: Fixed by: https://github.com/SELinuxProject/selinux/commit/a556538c2d5d2583273e025b45c02651fef47679 CVE-2026-18497 (A heap-buffer-overflow vulnerability exists in the nothings stb TrueTy ...) - - libstb <undetermined> - NOTE: https://github.com/nothings/stb/issues/1962 - TODO: check, missing upstream details + - libstb <unfixed> + NOTE: https://www.kb.cert.org/vuls/id/987105 + NOTE: https://github.com/nothings/stb/issues/1905 CVE-2026-17603 (Nexus Repository 3 did not sufficiently restrict which HikariCP connec ...) NOT-FOR-US: Sonatype CVE-2026-17601 (A user holding a permission to update privilege definitions could modi ...) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b5e25583961d1b704ccd06ffa4816350c9e935c4 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b5e25583961d1b704ccd06ffa4816350c9e935c4 You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
