Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
278a4294 by Salvatore Bonaccorso at 2026-09-14T22:48:11+02:00
Add advisory references for glibc issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -18572,6 +18572,7 @@ CVE-2026-80489
[bookworm] - glibc <postponed> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2524870
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=34568
+ NOTE:
https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0020
CVE-2026-80179 (A flaw was found in jwcrypto. A remote attacker can send a
specially c ...)
- python-jwcrypto <unfixed> (bug #1145983)
[trixie] - python-jwcrypto <no-dsa> (Minor issue)
@@ -19631,6 +19632,7 @@ CVE-2026-77117
[bookworm] - glibc <postponed> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2523274
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=34556
+ NOTE:
https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0019
CVE-2026-9668 (With legitimate user credentials in hand, attackers can
construct mali ...)
NOT-FOR-US: ZTE
CVE-2026-81036 (Stalwart Mail Server does not compare an OAuth redirect target
against ...)
@@ -22214,6 +22216,7 @@ CVE-2026-19499 (Calling strfmon and strfmon_l in the
GNU C Library version 2.38
[bookworm] - glibc <postponed> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2523258
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=34510
+ NOTE:
https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0017
CVE-2026-80051 (github.com/graphql-go/graphql (GraphQL for Go) through 0.8.1
does not ...)
NOT-FOR-US: github.com/graphql-go/graphql (GraphQL for Go)
CVE-2026-80050 (ContiNew Admin fails to apply file-upload permission checks or
file-ty ...)
@@ -23894,6 +23897,7 @@ CVE-2026-19542 (Calling tdelete on a sufficiently deep
tree in the GNU C Library
[bookworm] - glibc <postponed> (Minor issue)
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=34506
NOTE: Fixed by:
https://sourceware.org/git/?p=glibc.git;a=commit;h=e2789c46e3bfdcd67a82bea9946b315c179e83d3
+ NOTE:
https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0018
CVE-2026-78136 (chirpmyradio CHIRP before 39178db allows eval injection via
crafted CS ...)
NOT-FOR-US: chirpmyradio CHIRP
CVE-2026-78122 (docker-socket-proxy fails to properly gate read endpoints in
the /cont ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/278a4294d3888e03a13efd62df809f2f5ee330fc
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/278a4294d3888e03a13efd62df809f2f5ee330fc
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
