Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
85a48668 by Salvatore Bonaccorso at 2026-09-09T08:16:44+02:00
Add CVE-2026-19614/libnanoxml2-java
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2568,7 +2568,9 @@ CVE-2026-22575 (An improper access control vulnerability
in Fortinet FortiManage
CVE-2026-20293 (A vulnerability in the Unified Extensible Firmware Interface
(UEFI) Sh ...)
NOT-FOR-US: Cisco
CVE-2026-19614 (The API is prone to XML external entity (XXE) injection. By
default, X ...)
- TODO: check
+ - libnanoxml2-java <unfixed>
+ NOTE:
https://www.thalesgroup.com/en/search/cybersecurity/cybersecurity-services/cve-2026-19614
+ TODO: check details as reference not accessible
CVE-2026-19203 (A client may issue specially crafted HTTP/1.1 chunked requests
to a Je ...)
TODO: check
CVE-2026-18851 (Missing authorization in Ivanti Endpoint Manager Mobile before
version ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/85a4866836171df356097308311b2641836ef7f5
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/85a4866836171df356097308311b2641836ef7f5
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
