Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
77cd9dd3 by Salvatore Bonaccorso at 2026-09-23T14:12:22+02:00
Add CVE-2026-88350 for further investigation
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -378,7 +378,9 @@ CVE-2026-88418 (CMSimple 5.24 ships with CSRF protection
disabled by default, wh
CVE-2026-88416 (MCMS 6.1.1 through 6.2.1 has a SQL injection vulnerability in
the cust ...)
NOT-FOR-US: MCMS
CVE-2026-88350 (An integer overflow vulnerability exists in MPack 1.1.1 in
mpack_node_ ...)
- TODO: check
+ NOTE: https://github.com/ludocode/mpack/issues/124
+ NOTE:
https://github.com/ludocode/mpack/commit/3d54d1215bdb5478d3ddecaf85884c58b382cd9b
+ TODO: check, embedded in balboa, bpfilter, pocketpy
CVE-2026-88345 (An out-of-bounds read vulnerability exists in the schema lexer
of flat ...)
NOT-FOR-US: Dvidelabs flatcc
CVE-2026-88344 (An out-of-bounds read vulnerability exists in the schema lexer
of flat ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/77cd9dd33c99ca543f2ff4c6f243d5ed41d116c3
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/77cd9dd33c99ca543f2ff4c6f243d5ed41d116c3
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
