Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
27c8a12c by Salvatore Bonaccorso at 2026-09-23T13:20:03+02:00
Add two new jackson-databind issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -328,9 +328,15 @@ CVE-2026-92929 (OpenEye Apex Network Video Recorder (NVR)
firmware 3.2.9.376 tru
CVE-2026-92928 (OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376
contains ...)
NOT-FOR-US: OpenEye Apex Network Video Recorder (NVR) firmware
CVE-2026-91777 (Forward-reference completion for @JsonIdentityInfo object IDs
in Faste ...)
- TODO: check
+ - jackson-databind <unfixed>
+ NOTE:
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24
+ NOTE: https://github.com/FasterXML/jackson-databind/pull/6204
+ NOTE: Fixed by:
https://github.com/FasterXML/jackson-databind/commit/37ad9b81712cbb9fb62c2d2c1813593252a24b67
(jackson-databind-3.2.3, jackson-databind-3.1.7, jackson-databind-2.22.3,
jackson-databind-2.21.7, jackson-databind-2.18.11)
CVE-2026-91776 (TypeDeserializerBase._findDeserializer() in FasterXML
jackson-databind ...)
- TODO: check
+ - jackson-databind <unfixed>
+ NOTE:
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54
+ NOTE: https://github.com/FasterXML/jackson-databind/pull/6203
+ NOTE: Fixed by:
https://github.com/FasterXML/jackson-databind/commit/2870d1d6dc1b7e1c07ee11dd5b04ab71cddbb577
(jackson-databind-3.2.3, jackson-databind-3.1.7, jackson-databind-2.22.3,
jackson-databind-2.21.7, jackson-databind-2.18.11)
CVE-2026-91077 (The Event Booking Manager for WooCommerce WordPress plugin
before 5.7 ...)
NOT-FOR-US: WordPress plugin
CVE-2026-91073 (The Subscribe Forms WordPress plugin before 1.6.3 does not
sanitise a ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/27c8a12ce7fb1d6b9fe260f2fdfc412889033802
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/27c8a12ce7fb1d6b9fe260f2fdfc412889033802
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
