Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
268244c7 by security tracker role at 2026-09-27T19:14:30+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,111 @@
+CVE-2026-97165 (Joomla Extension - svenbluege.de - Reflected XSS and open
redirect in ...)
+ TODO: check
+CVE-2026-97164 (Joomla Extension - svenbluege.de - Authenticated arbitrary
path deleti ...)
+ TODO: check
+CVE-2026-94419 (Without NO_SESSION_CACHE_REF, wolfSSL_get_session() does not
return a ...)
+ TODO: check
+CVE-2026-94418 (Under WOLFSSL_SMALL_CERT_VERIFY, ProcessPeerCertParse() runs
the certi ...)
+ TODO: check
+CVE-2026-94417 (When an application enables both OCSP and CRL revocation
checking on o ...)
+ TODO: check
+CVE-2026-93304 (A (D)TLS 1.2 client can accept a ChangeCipherSpec message
before it ha ...)
+ TODO: check
+CVE-2026-93302 (MatchTrustedPeer ignores the public key used, leading to
forged CA clo ...)
+ TODO: check
+CVE-2026-89136 (When using RPK (Raw Public Key), the client side of a TLS 1.2,
1.3 and ...)
+ TODO: check
+CVE-2026-89135 (A failed X509_verify_cert call permanently plants an
unverified attack ...)
+ TODO: check
+CVE-2026-89134 (A certificate with no dNSName SAN but another SAN type present
(e.g. r ...)
+ TODO: check
+CVE-2026-89133 (wolfSSL versions 5.9.2 and earlier contain a flaw in the X.509
certifi ...)
+ TODO: check
+CVE-2026-89102 (In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side
impleme ...)
+ TODO: check
+CVE-2026-88778 (Predictable exact value from previous values vulnerability in
Citrix N ...)
+ TODO: check
+CVE-2026-88777 (Memory overflow vulnerability vulnerability in Citrix
NetScaler ADC an ...)
+ TODO: check
+CVE-2026-88776 (Memory overflow vulnerability vulnerability in Citrix
NetScaler ADC an ...)
+ TODO: check
+CVE-2026-88775 (Memory overflow vulnerability in Citrix NetScaler ADC and
Citrix NetSc ...)
+ TODO: check
+CVE-2026-88774 (Vulnerability in Citrix NetScaler ADC and Citrix NetScaler
Gateway. T ...)
+ TODO: check
+CVE-2026-88773 (Inconsistent interpretation of HTTP requests ('HTTP
Request/Response s ...)
+ TODO: check
+CVE-2026-88772 (Vulnerability in Citrix NetScaler ADC and Citrix NetScaler
Gateway. T ...)
+ TODO: check
+CVE-2026-88771 (Improper input validation vulnerability in Citrix NetScaler
ADC and Ci ...)
+ TODO: check
+CVE-2026-15442 (In all builds that make use of (D)TLS, including default
builds, there ...)
+ TODO: check
+CVE-2026-101061 (utcp-gql before 1.1.1 and utcp-websocket before 1.1.1 contain
server-s ...)
+ TODO: check
+CVE-2026-101060 (python-utcp versions before 1.1.4 contain a server-side
request forger ...)
+ TODO: check
+CVE-2026-101059 (utcp-http before 1.1.4 fails to validate the OAuth2 tokenUrl
field fro ...)
+ TODO: check
+CVE-2026-101058 (python-utcp (pip package utcp-http) before 1.1.12 does not
verify whet ...)
+ TODO: check
+CVE-2026-101057 (utcp-mcp (the MCP plugin of python-utcp) through 1.1.2
connects to the ...)
+ TODO: check
+CVE-2026-101056 (Cloudreve before 4.16.1 fails to revalidate share access when
restorin ...)
+ TODO: check
+CVE-2026-101051 (Cloudreve before 4.16.1 fails to properly sanitize file paths
returned ...)
+ TODO: check
+CVE-2026-101050 (Heym before 0.0.53 fails to verify the
X-Telegram-Bot-Api-Secret-Token ...)
+ TODO: check
+CVE-2026-101049 (Heym before 0.0.53 fails to verify Slack request signatures
when trigg ...)
+ TODO: check
+CVE-2026-101048 (Cloudreve before 4.17.0 registers the administrative node
test endpoin ...)
+ TODO: check
+CVE-2026-101047 (Fleet before 4.87.0 does not protect the two endpoints that
serve in-h ...)
+ TODO: check
+CVE-2026-101046 (Fleet before 4.89.0 contains an SQL injection vulnerability
in the act ...)
+ TODO: check
+CVE-2026-101045 (Fleet-maintained app install and uninstall scripts for macOS
are gener ...)
+ TODO: check
+CVE-2026-101044 (pacquet, the Rust package-manager component shipped in the
pnpm npm pa ...)
+ TODO: check
+CVE-2026-101043 (pnpm versions 11.0.0 before 11.11.0 and 10.7.0 before 10.34.5
expand $ ...)
+ TODO: check
+CVE-2026-101042 (Parse Server is an open-source backend server. In versions >=
9.0.0 < ...)
+ TODO: check
+CVE-2026-101041 (The account recovery (password reset) functionality in the
vulnerabili ...)
+ TODO: check
+CVE-2026-101033 (KitchenOwl through 0.7.10 fails to verify that category IDs
belong to ...)
+ TODO: check
+CVE-2026-101032 (navi through 2.24.0 fails to properly escape cheatsheet
variable value ...)
+ TODO: check
+CVE-2026-100875 (A vulnerability has been found in mathurvishal
CloudClassroom-PHP-Proj ...)
+ TODO: check
+CVE-2026-100874 (A flaw has been found in mathurvishal
CloudClassroom-PHP-Project up to ...)
+ TODO: check
+CVE-2026-100873 (A vulnerability was detected in mathurvishal
CloudClassroom-PHP-Projec ...)
+ TODO: check
+CVE-2026-100872 (Sylius versions before 2.1.16 and 2.2.9 fail to validate
payment amoun ...)
+ TODO: check
+CVE-2026-100871 (Sylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and
2.2.9 fa ...)
+ TODO: check
+CVE-2026-100870 (Sylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and
2.2.9 bu ...)
+ TODO: check
+CVE-2026-100869 (Sylius versions before 2.1.16 and 2.2.9 fail to restrict
payment reque ...)
+ TODO: check
+CVE-2026-100868 (Penpot before 2.18.0 binds the MCP server plugin WebSocket
bridge to a ...)
+ TODO: check
+CVE-2026-100867 (spaceship-prompt through 4.22.5 fails to sanitize control
characters f ...)
+ TODO: check
+CVE-2026-100866 (onefetch through 2.28.1 writes repository information field
values to ...)
+ TODO: check
+CVE-2026-100749 (Joomla Extension - svenbluege.de - CSRF in backend cleanup
actions in ...)
+ TODO: check
+CVE-2026-100748 (Joomla Extension - svenbluege.de - CSRF in various cart
actions in Eve ...)
+ TODO: check
+CVE-2026-100747 (Joomla Extension - svenbluege.de - CSRF in image upload in
Event Galle ...)
+ TODO: check
+CVE-2026-100741 (Eval injection in the JScript event-script dispatcher in
Progressive R ...)
+ TODO: check
CVE-2026-XXXX [Infinite loops and heap OOB read when parsing malformed ASF
headers]
- libmms <unfixed> (bug #1149047)
CVE-2026-XXXX [unbounded list indices from a Word document reach a wild
pointer dereference in wvAssembleSimplePAP]
@@ -65,7 +173,7 @@ CVE-2026-72668 (Unintended Proxy or Intermediary ('Confused
Deputy') (CWE-441) i
NOT-FOR-US: Elastic
CVE-2026-72662 (Authorization Bypass Through User-Controlled Key (CWE-639) in
Kibana c ...)
NOT-FOR-US: Elastic
-CVE-2026-100865 (Heym before 0.0.53 contains multiple independent
vulnerabilities. (1) ...)
+CVE-2026-100865 (Heym before 0.0.53 evaluates workflow condition expressions
using Pyth ...)
NOT-FOR-US: Heym
CVE-2026-100864 (heym before 0.0.91 contains a sandbox escape vulnerability in
the expr ...)
NOT-FOR-US: Heym
@@ -91,7 +199,7 @@ CVE-2026-100854 (AzuraCast before 0.23.6 lacks
RequireInternalConnection middlew
NOT-FOR-US: AzuraCast
CVE-2026-100853 (In AzuraCast before 0.23.8, the public On-Demand download
endpoint fai ...)
NOT-FOR-US: AzuraCast
-CVE-2026-100852 (AzuraCast through 0.23.x contains a command injection
vulnerability in ...)
+CVE-2026-100852 (AzuraCast before 0.23.8 contains a command injection
vulnerability in ...)
NOT-FOR-US: AzuraCast
CVE-2026-100851 (AzuraCast before 0.23.8 contains a broken access control
vulnerability ...)
NOT-FOR-US: AzuraCast
@@ -2951,18 +3059,20 @@ CVE-2026-XXXX [GHSA-27q7-qwhm-c34p]
[bookworm] - lxd <end-of-life> (EOL in bookworm LTS)
NOTE:
https://github.com/lxc/incus/security/advisories/GHSA-27q7-qwhm-c34p
CVE-2026-92288 (Lemonldap::NG::Portal versions from 2.20.0 before 2.21.6, from
2.22.0 ...)
+ {DSA-6520-1}
- lemonldap-ng 2.23.4+ds-1
[bookworm] - lemonldap-ng <not-affected> (Vulnerable code introduced
later)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/43830141/
NOTE: https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/work_items/3719
NOTE: https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/work_items/3721
CVE-2026-92289 (Lemonldap::NG::Portal versions from 2.23.0 before 2.23.4 for
Perl allo ...)
+ {DSA-6520-1}
- lemonldap-ng 2.23.4+ds-1
[bookworm] - lemonldap-ng <not-affected> (Vulnerable code introduced
later)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/43830168/
NOTE: https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/work_items/3719
CVE-2026-95811 (Lemonldap::NG::Handler versions from 2.0.0 before 2.16.10,
from 2.17.0 ...)
- {DLA-4797-1}
+ {DSA-6520-1 DLA-4797-1}
- lemonldap-ng 2.23.4+ds-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/43833452/
NOTE: https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/work_items/3723
@@ -72434,6 +72544,7 @@ CVE-2026-58045 (A flaw in Node.js allows a spoofed
`TypedArray` `byteLength` to
NOTE:
https://nodejs.org/en/blog/vulnerability/july-2026-security-releases#nodezlib-sync-apis-can-crash-on-spoofed-typedarray-length-cve-2026-58045---medium
NOTE: Fixed by:
https://github.com/nodejs/node/commit/0d072480c3dbbad6db8723e39786321646989343
(v22.23.2)
CVE-2026-58042 (A flaw in Node.js can cause dns.resolveAny() Aborts the
Node.js Proces ...)
+ {DSA-6517-1}
- nodejs 24.19.0+dfsg+~cs24.13.3-1
NOTE:
https://nodejs.org/en/blog/vulnerability/july-2026-security-releases#dnsresolveany-can-abort-on-dns-responses-with-many-a-records-cve-2026-58042---medium
NOTE: Fixed by:
https://github.com/nodejs/node/commit/22efc051a3c3b3bbddbb3cb06ce1ca5775923c01
(v22.23.2)
@@ -72561,6 +72672,7 @@ CVE-2026-58066 (Rocket.Chat's SAML SSO before versions
8.7.0, 8.6.1, 8.5.2, 8.4.
CVE-2026-58046 (Improper neutralization in the Plesk XML-RPC API allows a
remote authe ...)
NOT-FOR-US: Plesk
CVE-2026-58043 (A flaw in Node.js Permission Model enforcement can over-grant
filesyst ...)
+ {DSA-6517-1}
- nodejs 24.19.0+dfsg+~cs24.13.3-1
[bookworm] - nodejs <not-affected> (Permission Model is a Node 20+
feature)
[bullseye] - nodejs <not-affected> (Permission Model is a Node 20+
feature)
@@ -99292,35 +99404,43 @@ CVE-2026-55223 (c3p0 is a JDBC Connection pooling
library. In versions prior to
NOTE:
https://github.com/swaldman/c3p0/commit/7b022c4b6694dabc6204254dc917af9c38f2cb27
(v0.14.0)
TODO: check if that is an issue with the packaged version
CVE-2026-54903 (Oj (Optimized JSON) is a JSON parser and Object marshaller
packaged as ...)
+ {DSA-6521-1}
- ruby-oj 3.17.3-1
NOTE:
https://github.com/ohler55/oj/security/advisories/GHSA-475m-ph3x-64gp
NOTE:
https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7
(v3.17.3)
CVE-2026-54902 (Oj (Optimized JSON) is a JSON parser and Object marshaller
packaged as ...)
+ {DSA-6521-1}
- ruby-oj 3.17.6-2
NOTE:
https://github.com/ohler55/oj/security/advisories/GHSA-m578-w5vf-rfcm
NOTE:
https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7
(v3.17.3)
NOTE: Followup: https://github.com/ohler55/oj/issues/1109
CVE-2026-54901 (Oj (Optimized JSON) is a JSON parser and Object marshaller
packaged as ...)
+ {DSA-6521-1}
- ruby-oj 3.17.3-1
NOTE:
https://github.com/ohler55/oj/security/advisories/GHSA-vwm4-62gf-x745
NOTE:
https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7
(v3.17.3)
CVE-2026-54900 (Oj (Optimized JSON) is a JSON parser and Object marshaller
packaged as ...)
+ {DSA-6521-1}
- ruby-oj 3.17.3-1
NOTE:
https://github.com/ohler55/oj/security/advisories/GHSA-9cv6-qcjw-4grx
NOTE:
https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7
(v3.17.3)
CVE-2026-54899 (Oj (Optimized JSON) is a JSON parser and Object marshaller
packaged as ...)
+ {DSA-6521-1}
- ruby-oj 3.17.3-1
NOTE:
https://github.com/ohler55/oj/security/advisories/GHSA-2cw7-v8ff-p88r
NOTE:
https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7
(v3.17.3)
CVE-2026-54898 (Oj (Optimized JSON) is a JSON parser and Object marshaller
packaged as ...)
+ {DSA-6521-1}
- ruby-oj 3.17.3-1
NOTE:
https://github.com/ohler55/oj/security/advisories/GHSA-q2gm-54r6-8fwm
NOTE:
https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7
(v3.17.3)
CVE-2026-54897 (Oj (Optimized JSON) is a JSON parser and Object marshaller
packaged as ...)
+ {DSA-6521-1}
- ruby-oj 3.17.3-1
NOTE:
https://github.com/ohler55/oj/security/advisories/GHSA-9ppp-w3g4-fh4q
NOTE:
https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7
(v3.17.3)
CVE-2026-54896 (Oj (Optimized JSON) is a JSON parser and Object marshaller
packaged as ...)
+ {DSA-6521-1}
- ruby-oj 3.17.3-1
NOTE:
https://github.com/ohler55/oj/security/advisories/GHSA-35w3-pjm6-wj95
NOTE:
https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7
(v3.17.3)
@@ -99336,14 +99456,17 @@ CVE-2026-54673 (electron-updater allows for automatic
updates for Electron apps.
CVE-2026-54672 (electron-updater allows for automatic updates for Electron
apps. Prior ...)
NOT-FOR-US: electron-updater
CVE-2026-54592 (Oj (Optimized JSON) is a JSON parser and Object marshaller
packaged as ...)
+ {DSA-6521-1}
- ruby-oj 3.17.3-1
NOTE:
https://github.com/ohler55/oj/security/advisories/GHSA-3m6q-jj5j-38c9
NOTE:
https://github.com/ohler55/oj/commit/bbde91a679728f94c4492ebc3683f4fa3309049f
(v3.17.3)
CVE-2026-54502 (Oj (Optimized JSON) is a JSON parser and Object marshaller
packaged as ...)
+ {DSA-6521-1}
- ruby-oj 3.17.3-1
NOTE:
https://github.com/ohler55/oj/security/advisories/GHSA-3v45-f3vh-wg7m
NOTE:
https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7
(v3.17.3)
CVE-2026-54500 (Oj (Optimized JSON) is a JSON parser and Object marshaller
packaged as ...)
+ {DSA-6521-1}
- ruby-oj 3.17.3-1
NOTE:
https://github.com/ohler55/oj/security/advisories/GHSA-fm7p-mprw-wjm9
NOTE:
https://github.com/ohler55/oj/commit/bbde91a679728f94c4492ebc3683f4fa3309049f
(v3.17.3)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/268244c73f1887853d843f319bb85249359b85ff
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/268244c73f1887853d843f319bb85249359b85ff
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
