Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
3ae74479 by Salvatore Bonaccorso at 2026-09-25T23:36:26+02:00
Add new wpa issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -365642,6 +365642,16 @@ CVE-2024-23456 (Anti-tampering can be disabled under
certain conditions without
NOT-FOR-US: Zscaler
CVE-2023-40819 (ID4Portais in version < V.2022.837.002a returns message
parameter unsa ...)
NOT-FOR-US: ID4Portais
+CVE-2026-XXXX [wpa_config_write() follows symlinks (no O_NOFOLLOW) ->
arbitrary root file overwrite by a netdev-group user]
+ - wpa <unfixed> (bug #1148985)
+ NOTE: https://bugs.launchpad.net/ubuntu/+source/wpa/+bug/2163513
+ NOTE:
https://git.w1.fi/cgit/hostap/commit/?id=e3d1ebda8117c455547b8a9fb06460fb6a405373
+ NOTE:
https://git.w1.fi/cgit/hostap/commit/?id=1037cc3678ef316ec65059897a941ac3bcfb44bb
+ NOTE:
https://git.w1.fi/cgit/hostap/commit/?id=c53b2ce62ee11f0d5d95177feeb031196a5ccd25
+ NOTE:
https://git.w1.fi/cgit/hostap/commit/?id=b35d7d48bb646eda965fc4aa7cee750eacd87687
+ NOTE:
https://git.w1.fi/cgit/hostap/commit/?id=4540af010df3f4d02240757fb0cbff29339a12c3
+ NOTE:
https://git.w1.fi/cgit/hostap/commit/?id=e3937427e702f2efd45b2bd3cdc3e8591c3280e4
+ NOTE:
https://git.w1.fi/cgit/hostap/commit/?id=50e7efc698f9211717f484614e04f42e4f4f7878
CVE-2024-5290 (An issue was discovered in Ubuntu wpa_supplicant that resulted
in load ...)
{DSA-5739-1}
- wpa 2:2.10-22
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3ae7447904ece66fe0329ac9c68f433010026872
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3ae7447904ece66fe0329ac9c68f433010026872
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
