Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
4300af77 by security tracker role at 2026-09-07T07:13:29+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,8 +1,134 @@
+CVE-2026-86315 (An out-of-bounds write caused by numeric truncation Samsung
Open Sour ...)
+ TODO: check
+CVE-2026-86314 (Integer overflow in the source-bounds check in Memory::init()
(src/run ...)
+ TODO: check
+CVE-2026-86313 (Out-of-bounds write vulnerability in Samsung Opensource Walrus
allows ...)
+ TODO: check
+CVE-2026-86279 (A vulnerability was determined in SourceCodester
Syllabus-Aligned Lear ...)
+ TODO: check
+CVE-2026-86278 (A vulnerability was found in SourceCodester Syllabus-Aligned
Learning ...)
+ TODO: check
+CVE-2026-86277 (A vulnerability has been found in SourceCodester
Syllabus-Aligned Lear ...)
+ TODO: check
+CVE-2026-86276 (A flaw has been found in SourceCodester Syllabus-Aligned
Learning Mana ...)
+ TODO: check
+CVE-2026-86275 (A vulnerability was detected in SourceCodester
Syllabus-Aligned Learni ...)
+ TODO: check
+CVE-2026-86274 (A security vulnerability has been detected in projeto-siga
siga up to ...)
+ TODO: check
+CVE-2026-86273 (A weakness has been identified in projeto-siga siga up to
11.1.1. Affe ...)
+ TODO: check
+CVE-2026-86272 (A vulnerability was determined in Beijing Meite Software
Technology U+ ...)
+ TODO: check
+CVE-2026-86271 (A vulnerability was found in FluentCMS up to 0.0.5. This
affects the f ...)
+ TODO: check
+CVE-2026-86270 (A vulnerability has been found in itsourcecode Sales and
Inventory Sys ...)
+ TODO: check
+CVE-2026-86269 (A flaw has been found in itsourcecode Sales and Inventory
System 1.0. ...)
+ TODO: check
+CVE-2026-86268 (A vulnerability was detected in itsourcecode School Management
System ...)
+ TODO: check
+CVE-2026-86267 (A security vulnerability has been detected in itsourcecode
Information ...)
+ TODO: check
+CVE-2026-86265 (A vulnerability has been found in itsourcecode Sales and
Inventory Sys ...)
+ TODO: check
+CVE-2026-86264 (A flaw has been found in sfturing ssm_pro up to
627f426331da8086ce8fff ...)
+ TODO: check
+CVE-2026-86263 (A vulnerability was detected in sfturing hosp_order up to
627f426331da ...)
+ TODO: check
+CVE-2026-86262 (A security vulnerability has been detected in sfturing
hosp_order up t ...)
+ TODO: check
+CVE-2026-86261 (A weakness has been identified in sfturing hosp_order up to
627f426331 ...)
+ TODO: check
+CVE-2026-86260 (A security flaw has been discovered in sfturing hosp_order up
to 627f4 ...)
+ TODO: check
+CVE-2026-86245 (A vulnerability was detected in itsourcecode Sales and
Inventory Syste ...)
+ TODO: check
+CVE-2026-86244 (A security vulnerability has been detected in FastAdmin up to
1.2.0.20 ...)
+ TODO: check
+CVE-2026-86241 (A weakness has been identified in liufee FeehiCMS up to 2.1.1.
This im ...)
+ TODO: check
+CVE-2026-86240 (A security flaw has been discovered in liufee FeehiCMS up to
2.1.1. Th ...)
+ TODO: check
+CVE-2026-86239 (A vulnerability was identified in liufee FeehiCMS up to 2.1.1.
The imp ...)
+ TODO: check
+CVE-2026-86238 (A vulnerability was determined in projectworlds Online
Examination Sys ...)
+ TODO: check
+CVE-2026-86237 (A vulnerability was found in openagents-org openagents up to
0.8.19/0. ...)
+ TODO: check
+CVE-2026-86236 (A vulnerability has been found in itsourcecode Sales and
Inventory Sys ...)
+ TODO: check
+CVE-2026-86235 (A flaw has been found in itsourcecode Sales and Inventory
System 1.0. ...)
+ TODO: check
+CVE-2026-86234 (A vulnerability was detected in itsourcecode Sales and
Inventory Syste ...)
+ TODO: check
+CVE-2026-86233 (A security vulnerability has been detected in itsourcecode
Sales and I ...)
+ TODO: check
+CVE-2026-86232 (A weakness has been identified in itsourcecode Sales and
Inventory Sys ...)
+ TODO: check
+CVE-2026-86231 (A security flaw has been discovered in mwiede jsch up to
2.28.5. Affec ...)
+ TODO: check
+CVE-2026-86228 (A security vulnerability has been detected in JeecgBoot up to
3.9.3. T ...)
+ TODO: check
+CVE-2026-86227 (A weakness has been identified in valkey-io valkey up to
9.0.5/9.1.1. ...)
+ TODO: check
+CVE-2026-86226 (A security flaw has been discovered in Projectwolds Online
Attendance ...)
+ TODO: check
+CVE-2026-86225 (A vulnerability was identified in SourceCodester Class and
Exam Timeta ...)
+ TODO: check
+CVE-2026-86224 (A vulnerability was determined in SourceCodester Class and
Exam Timeta ...)
+ TODO: check
+CVE-2026-86223 (A vulnerability was found in SourceCodester Class and Exam
Timetabling ...)
+ TODO: check
+CVE-2026-86222 (A vulnerability has been found in SourceCodester Class and
Exam Timeta ...)
+ TODO: check
+CVE-2026-79698 (A vulnerability was identified in Advantech WISE-6610-NB,
WISE-6610-EB ...)
+ TODO: check
+CVE-2026-79697 (A vulnerability was determined in Advantech WISE-6610-NB,
WISE-6610-EB ...)
+ TODO: check
+CVE-2026-20518 (In geniezone, there is a possible information disclosure due
to a miss ...)
+ TODO: check
+CVE-2026-20517 (In geniezone, there is a possible escalation of privilege due
to use a ...)
+ TODO: check
+CVE-2026-20516 (In MiracastService, there is a possible escalation of
privilege due to ...)
+ TODO: check
+CVE-2026-20515 (In gpu, there is a possible system crash due to use after
free. This c ...)
+ TODO: check
+CVE-2026-20514 (In Audio HAL, there is a possible information disclosure due
to a miss ...)
+ TODO: check
+CVE-2026-20513 (In Audio HAL, there is a possible information disclosure due
to improp ...)
+ TODO: check
+CVE-2026-20512 (In Audio HAL, there is a possible escalation of privilege due
to impro ...)
+ TODO: check
+CVE-2026-20511 (In SurfaceFlinger, there is a possible memory corruption due
to use af ...)
+ TODO: check
+CVE-2026-20510 (In camera middleware, there is a possible escalation of
privilege due ...)
+ TODO: check
+CVE-2026-20509 (In Power HAL, there is a possible out of bounds write due to a
missing ...)
+ TODO: check
+CVE-2026-20508 (In Power HAL, there is a possible escalation of privilege due
to type ...)
+ TODO: check
+CVE-2026-20507 (In Audio HAL, there is a possible escalation of privilege due
to use a ...)
+ TODO: check
+CVE-2026-20506 (In Audio HAL, there is a possible escalation of privilege due
to use a ...)
+ TODO: check
+CVE-2026-20504 (In Modem, there is a possible system crash due to a missing
bounds che ...)
+ TODO: check
+CVE-2026-20503 (In Modem, there is a possible system crash due to a missing
bounds che ...)
+ TODO: check
+CVE-2026-20502 (In vdec, there is a possible out of bounds write due to a
missing boun ...)
+ TODO: check
+CVE-2026-20501 (In vdec, there is a possible out of bounds write due to a heap
buffer ...)
+ TODO: check
+CVE-2026-20500 (In Modem, there is a possible system crash due to improper
input valid ...)
+ TODO: check
+CVE-2026-16876 (An authentication bypass vulnerability exists in the WebGUI of
Series ...)
+ TODO: check
CVE-2026-85013
- modules <unfixed>
[trixie] - modules <no-dsa> (Minor issue; will be fixed via point
release)
NOTE: Fixed by:
https://github.com/envmodules/modules/commit/d401b76a863386f9064637c71b66837805f82881
(v5.6.2)
-CVE-2026-86304
+CVE-2026-86304 (MojoX::Authentication versions before 0.006 for Perl allow
SAML authen ...)
NOT-FOR-US: MojoX::Authentication Perl module
CVE-2026-86283 (MISP's UiBeta theme collection view
(app/View/Themed/UiBeta/Collection ...)
- misp <itp> (bug #1144317)
@@ -2210,7 +2336,7 @@ CVE-2026-62906 (Improper neutralization of special
elements in data query logic
NOT-FOR-US: Microsoft
CVE-2026-53728 (Medplum is a developer platform that enables development of
healthcare ...)
NOT-FOR-US: Medplum
-CVE-2026-49509 (Out-of-bounds read vulnerability in Samsung Opensource
Escargot allows ...)
+CVE-2026-49509 (Out-of-bounds read vulnerability in Samsung Opensource rLottie
allows ...)
- rlottie <not-affected> (rlottie in Debian uses the packaged libstb)
NOTE: rlottie as packaged in Debian uses the system-copy of libstb
NOTE: The fix that was made for the vendored copy of rlottie is
@@ -152045,7 +152171,7 @@ CVE-2026-2676 (A weakness has been identified in
GoogTech sms-ssm up to e8534c76
NOT-FOR-US: GoogTech sms-ssm
CVE-2026-2672 (A security flaw has been discovered in Tsinghua Unigroup
Electronic Ar ...)
NOT-FOR-US: Tsinghua Unigroup Electronic Archives System
-CVE-2026-2670 (A vulnerability was identified in Advantech WISE-6610
1.2.1_20251110. ...)
+CVE-2026-2670 (A vulnerability was identified in Advantech WISE-6610-NB,
WISE-6610-EB ...)
NOT-FOR-US: Advantech
CVE-2026-2669 (A vulnerability was determined in Rongzhitong Visual Integrated
Comman ...)
NOT-FOR-US: Rongzhitong Visual Integrated Command and Dispatch Platform
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4300af77c8b4724c14a638e5479356b39bf80268
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4300af77c8b4724c14a638e5479356b39bf80268
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
