Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
7b278d5e by Salvatore Bonaccorso at 2026-09-11T05:52:52+02:00
Add CVE-2026-84828/pcs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -379,7 +379,11 @@ CVE-2026-85228 (An integer overflow in the tensor buffer
validation component in
CVE-2026-85217 (A maliciously crafted add-in, when installed and executed in
Autodesk ...)
NOT-FOR-US: Autodesk
CVE-2026-84828 (A flaw was found in PCS (Pacemaker Configuration System). A
local atta ...)
- TODO: check
+ - pcs <unfixed>
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2527320
+ NOTE: Introduced with:
https://github.com/ClusterLabs/pcs/commit/9178b78d11baa70e700a5c0d9fc1c17f27d452fa
(0.10.8)
+ NOTE: Fixed by:
https://github.com/ClusterLabs/pcs/commit/b41eaf3c6e2ecfc575c42442fb02b8ef05b4dd6a
+ TODO: update once upstream commit public/accessible, cf. Red Hat bug
CVE-2026-84821 (Unauthenticated Broken Access Control in WP Fast Total Search
<= 1.82. ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-84819 (Unauthenticated Cross Site Scripting (XSS) in WPAdverts <=
2.3.3 versi ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7b278d5eff37a92532a03197911860f147a773fc
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7b278d5eff37a92532a03197911860f147a773fc
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
