Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
62eca8cd by Salvatore Bonaccorso at 2026-09-25T22:02:37+02:00
Add CVE-2026-97222/gnumeric
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -97,7 +97,9 @@ CVE-2026-97324 (A vulnerability was identified in
YunaiV/zhijiantianya ruoyi-vue
CVE-2026-97228 (Rapid7 Bulk Export MCP versions 0.2.5 through 0.6.1 suffer
from a Grap ...)
NOT-FOR-US: Rapid7 Bulk Export MCP
CVE-2026-97222 (A heap use-after-free flaw was found in Gnumeric. When a user
opens a ...)
- TODO: check
+ - gnumeric <unfixed>
+ NOTE: https://gitlab.gnome.org/GNOME/gnumeric/-/issues/897
+ NOTE: Fixed by:
https://gitlab.gnome.org/GNOME/gnumeric/-/commit/bc1dee29525933994181fb2307d6ad584de6040d
CVE-2026-97064 (X-SpringBoot through 6.0 ships with a hardcoded static master
login ve ...)
NOT-FOR-US: X-SpringBoot
CVE-2026-97063 (X-SpringBoot through 6.0 returns login verification codes in
HTTP resp ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/62eca8cdbc9c90d840fab93f92e68d95754a40d1
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/62eca8cdbc9c90d840fab93f92e68d95754a40d1
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
