Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits: 166f3d2d by Moritz Muehlenhoff at 2026-09-16T12:44:19+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,6 @@ +CVE-2026-92000 + NOT-FOR-US: Node adm-zip + NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2026-92000 CVE-2026-89792 [ksmbd: prevent out-of-bounds reads in share config responses] - linux <unfixed> NOTE: https://git.kernel.org/linus/f25e93768fcc5d8287e50b1ec52a42e4c276df34 (7.3-rc2) @@ -2642,7 +2645,7 @@ CVE-2026-61701 (Laravel MagicLink creates links for authentication without a pas CVE-2026-61534 (Yayson is a library for serializing and reading JSON API data in JavaS ...) NOT-FOR-US: Yayson CVE-2026-5132 (Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7 ...) - TODO: check + - mattermost-server <itp> (bug #823556) CVE-2026-59960 (Argos JavaScript provides official Argos SDKs for JavaScript. Prior to ...) NOT-FOR-US: Argos JavaScript CVE-2026-59570 (On affected versions of Zscaler client connector, a pre-installed peer ...) @@ -2818,36 +2821,36 @@ CVE-2026-15923 (The Zephyr SDIO subsystem function sdio_io_rw_extended_helper() CVE-2026-15893 (net_if_ipv6_calc_reachable_time() in subsys/net/ip/net_if.c derives a ...) NOT-FOR-US: Zephyr, different from src:zephyr CVE-2026-15814 (Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7 ...) - TODO: check + - mattermost-server <itp> (bug #823556) CVE-2026-15600 (Alior Bank PrestaShop module "raty" for commercial partners is vulnera ...) - TODO: check + NOT-FOR-US: PrestaShop module CVE-2026-14344 (Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7 ...) - TODO: check + - mattermost-server <itp> (bug #823556) CVE-2026-14259 (Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7 ...) - TODO: check + - mattermost-server <itp> (bug #823556) CVE-2026-13417 (Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7 ...) - TODO: check + - mattermost-server <itp> (bug #823556) CVE-2026-12985 (Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7 ...) - TODO: check + - mattermost-server <itp> (bug #823556) CVE-2026-12882 (Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7 ...) - TODO: check + - mattermost-server <itp> (bug #823556) CVE-2026-12518 (A local privilege escalation vulnerability in the Logitech Logi Option ...) TODO: check CVE-2026-12258 (Inadequate access control in Hiperdino\u2019s REST v1.0 API. The publi ...) - TODO: check + NOT-FOR-US: Hiperdino CVE-2026-11993 (Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7 ...) - TODO: check + - mattermost-server <itp> (bug #823556) CVE-2026-10556 (Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7 ...) - TODO: check + - mattermost-server <itp> (bug #823556) CVE-2026-10542 (Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7 ...) - TODO: check + - mattermost-server <itp> (bug #823556) CVE-2025-24890 (gitoxide is an implementation of git written in Rust. Prior to 0.13.3, ...) - rust-gix-sec <not-affected> (Windows-specific) NOTE: https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-7rhf-42qf-vrvc NOTE: https://github.com/GitoxideLabs/gitoxide/pull/2510 NOTE: https://github.com/GitoxideLabs/gitoxide/commit/39e37482d6f884bf4765dbe9c95a93dc2a92e559 CVE-2024-58383 (Froxlor before 2.2.0 (affected up to and including 2.2.0-rc3) generate ...) - TODO: check + - froxlor <itp> (bug #581792) CVE-2026-19624 (A flaw was found in NetworkManager-l2tp. The plugin writes attacker-co ...) {DSA-6498-1} - network-manager-l2tp 1.52.6-1 View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/166f3d2dbfb54f1f0a8adaf296a9dea4fd247182 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/166f3d2dbfb54f1f0a8adaf296a9dea4fd247182 You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
