Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
9252be91 by Salvatore Bonaccorso at 2026-09-23T20:30:25+02:00
Update notes for CVE-2026-68956
- - - - -
c764761f by Salvatore Bonaccorso at 2026-09-23T20:32:53+02:00
Update information on CVE-2026-65634
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1430,12 +1430,18 @@ CVE-2026-6922 (The WP Table Builder \u2013 Drag & Drop
Table Builder plugin for
CVE-2026-68956 (Allocation of Resources Without Limits or Throttling
vulnerability in ...)
- erlang 1:29.1.1+dfsg-1
NOTE:
https://github.com/erlang/otp/security/advisories/GHSA-qhcm-px9c-rvfh
+ NOTE: https://cna.erlef.org/cves/CVE-2026-68956.html
+ NOTE: https://osv.dev/vulnerability/EEF-CVE-2026-68956
NOTE: Introduced by:
https://github.com/erlang/otp/commit/84df3d4d0278e21a36a453bfee94799f0df67c2a
(OTP-18.1.2)
NOTE: Fixed by:
https://github.com/erlang/otp/commit/79c2d2be17d902c5f53969b5806b725efda831be
(OTP-29.1.1)
+ NOTE: Fixed by:
https://github.com/erlang/otp/commit/e18100975f0e5a8d59d02de00df12247a91b443b
(OTP-28.5.0.7)
+ NOTE: Fixed by:
https://github.com/erlang/otp/commit/e2bbad0107bba41491a4d549686fd023db8740da
(OTP-27.3.4.18)
CVE-2026-65634 (Inefficient algorithmic complexity in the Erlang/OTP asn1
OBJECT IDENT ...)
- erlang 1:29.1.1+dfsg-1
NOTE:
https://github.com/erlang/otp/security/advisories/GHSA-qghx-23m5-r55m
- NOTE:
https://github.com/erlang/otp/commit/0fe2c02fdc06fab1c63be9db1a7456993d20f838
(OTP-29.1.1)
+ NOTE: https://cna.erlef.org/cves/CVE-2026-65634.html
+ NOTE: https://osv.dev/vulnerability/EEF-CVE-2026-65634
+ NOTE: Fixed by:
https://github.com/erlang/otp/commit/0fe2c02fdc06fab1c63be9db1a7456993d20f838
(OTP-29.1.1, OTP-28.5.0.7, OTP-27.3.4.18)
CVE-2026-65179 (NVIDIA NeMo contains a vulnerability in the TabularTokenizer
class whe ...)
NOT-FOR-US: NVIDIA
CVE-2026-65178 (NVIDIA NeMo contains a vulnerability in its dataset-loading
workflow w ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/c23e49af47e75ec76f7860f4cee4464e10e2ba7e...c764761f184bddbddd3ad3c97f963f91c6d25574
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/c23e49af47e75ec76f7860f4cee4464e10e2ba7e...c764761f184bddbddd3ad3c97f963f91c6d25574
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
