Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a286e498 by Salvatore Bonaccorso at 2026-09-04T19:38:34+02:00
Add Debian bug references for various issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -6,7 +6,7 @@ CVE-2026-76594
CVE-2026-76595
NOT-FOR-US: Red Hat Insights Advisor backend
CVE-2026-71223
- - gfs2-utils <unfixed>
+ - gfs2-utils <unfixed> (bug #1146712)
[trixie] - gfs2-utils <no-dsa> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2511400
CVE-2026-9745 (IBM Netezza Software 11.3.0.3 through Interim Fix 002 has
operations t ...)
@@ -812,23 +812,23 @@ CVE-2026-71404 (A flaw was found in Rancher Manager. The
GlobalRole controller d
CVE-2026-71403 (A flaw was found in Rancher Manager. The /v3/users update path
did not ...)
NOT-FOR-US: Rancher
CVE-2026-71224 (A stack overflow vulnerability was found in gfs2-utils. The
metadata w ...)
- - gfs2-utils <unfixed>
+ - gfs2-utils <unfixed> (bug #1146712)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2511397
TODO: check upstream details
CVE-2026-71222 (A heap out-of-bounds read vulnerability was found in
gfs2-utils. The e ...)
- - gfs2-utils <unfixed>
+ - gfs2-utils <unfixed> (bug #1146712)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2511399
TODO: check upstream details
CVE-2026-71221 (A stack out-of-bounds write vulnerability was found in
gfs2-utils. In ...)
- - gfs2-utils <unfixed>
+ - gfs2-utils <unfixed> (bug #1146712)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2511396
TODO: check upstream details
CVE-2026-71220 (A stack out-of-bounds write vulnerability was found in
gfs2-utils. In ...)
- - gfs2-utils <unfixed>
+ - gfs2-utils <unfixed> (bug #1146712)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2511398
TODO: check upstream details
CVE-2026-71219 (A stack overflow vulnerability was found in gfs2-utils. The
hash table ...)
- - gfs2-utils <unfixed>
+ - gfs2-utils <unfixed> (bug #1146712)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2507750
TODO: check upstream details
CVE-2026-6071 (A remote code execution security issue exists in the affected
products ...)
@@ -2211,7 +2211,7 @@ CVE-2026-73552
CVE-2026-73553
- envoyproxy <itp> (bug #987544)
CVE-2026-16658
- - ansible <unfixed>
+ - ansible <unfixed> (bug #1146701)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2506209
CVE-2026-84353 (Use after free in Shared Tab Groups in Google Chrome on on
Android pri ...)
{DSA-6482-1}
@@ -7191,7 +7191,7 @@ CVE-2026-77990 (Joomla Extension - joomlaeventmanager.net
- Attendee lists reada
CVE-2026-77989 (Joomla Extension - joomlaeventmanager.net - Reflected XSS via
the PDF ...)
NOT-FOR-US: Joomla
CVE-2026-77652 (A heap-based buffer overflow vulnerability exists in the Dia
diagram e ...)
- - dia <unfixed>
+ - dia <unfixed> (bug #1146702)
[trixie] - dia <no-dsa> (Minor issue)
[bookworm] - dia <postponed> (Minor issue)
NOTE: https://gitlab.gnome.org/GNOME/dia/-/issues/580
@@ -7528,7 +7528,7 @@ CVE-2025-51675 (An issue was discovered in openRISC
OR1200 commit 83ac6b. An ina
CVE-2023-27503
REJECTED
CVE-2026-80158 (A flaw was found in the ipa_getkeytab module of the
community.general ...)
- - ansible <unfixed>
+ - ansible <unfixed> (bug #1146699)
[trixie] - ansible <no-dsa> (Minor issue)
[bookworm] - ansible <postponed> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2524651
@@ -7966,7 +7966,7 @@ CVE-2026-78236 (An insecure PIN derivation mechanism in
ABR allows a low-privile
CVE-2026-77801 (GitLab has remediated an issue in GitLab CE/EE affecting all
versions ...)
NOT-FOR-US: GitLab (used to be packaged in the Debian archive as
src:gitlab, but never in a stable release)
CVE-2026-77658 (A stack-based buffer overflow vulnerability exists in the Dia
diagram ...)
- - dia <unfixed>
+ - dia <unfixed> (bug #1146703)
[trixie] - dia <no-dsa> (Minor issue)
[bookworm] - dia <postponed> (Minor issue)
NOTE: https://gitlab.gnome.org/GNOME/dia/-/issues/581
@@ -44379,7 +44379,7 @@ CVE-2026-50149 (Contour is a Kubernetes ingress
controller using Envoy proxy. In
CVE-2026-47701
NOT-FOR-US: OpenTelemetry Operator
CVE-2026-16566
- - ansible <unfixed>
+ - ansible <unfixed> (bug #1146700)
[trixie] - ansible <no-dsa> (Minor issue)
[bookworm] - ansible <not-affected> (Vulnerable code not present)
[bullseye] - ansible <not-affected> (Vulnerable code not present)
@@ -64484,7 +64484,7 @@ CVE-2026-53359 (In the Linux kernel, the following
vulnerability has been resolv
CVE-2026-49297 (Apache Airflow's Google provider operators `GCSToSFTPOperator`
and `GC ...)
NOT-FOR-US: Airflow provider
CVE-2026-54161
- - nut <unfixed>
+ - nut <unfixed> (bug #1146704)
[trixie] - nut <no-dsa> (Minor issue)
[bookworm] - nut <postponed> (Minor issue)
[bullseye] - nut <postponed> (Minor issue)
@@ -76498,7 +76498,7 @@ CVE-2026-12770 (A vulnerability was determined in
BerriAI litellm up to 1.63.1.
NOT-FOR-US: LiteLLM
CVE-2026-54604
[experimental] - openslide 4.0.1+dfsg-1~0exp2
- - openslide <unfixed>
+ - openslide <unfixed> (bug #1146705)
[trixie] - openslide <ignored> (Minor issue; only an exploitable issue
with behaviour change of libtiff in 4.7.1)
[bookworm] - openslide <ignored> (Minor issue; only exploitable with
the libtiff 4.7.1 behaviour change)
[bullseye] - openslide <ignored> (Minor issue; only exploitable with
the libtiff 4.7.1 behaviour change)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a286e498437545e8bb58c1ca02aac4f292799df1
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a286e498437545e8bb58c1ca02aac4f292799df1
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
