Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6e59096e by security tracker role at 2026-09-27T19:15:35+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,7 +1,7 @@
CVE-2026-97165 (Joomla Extension - svenbluege.de - Reflected XSS and open
redirect in ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-97164 (Joomla Extension - svenbluege.de - Authenticated arbitrary
path deleti ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-94419 (Without NO_SESSION_CACHE_REF, wolfSSL_get_session() does not
return a ...)
TODO: check
CVE-2026-94418 (Under WOLFSSL_SMALL_CERT_VERIFY, ProcessPeerCertParse() runs
the certi ...)
@@ -23,21 +23,21 @@ CVE-2026-89133 (wolfSSL versions 5.9.2 and earlier contain
a flaw in the X.509 c
CVE-2026-89102 (In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side
impleme ...)
TODO: check
CVE-2026-88778 (Predictable exact value from previous values vulnerability in
Citrix N ...)
- TODO: check
+ NOT-FOR-US: NetScaler
CVE-2026-88777 (Memory overflow vulnerability vulnerability in Citrix
NetScaler ADC an ...)
- TODO: check
+ NOT-FOR-US: NetScaler
CVE-2026-88776 (Memory overflow vulnerability vulnerability in Citrix
NetScaler ADC an ...)
- TODO: check
+ NOT-FOR-US: NetScaler
CVE-2026-88775 (Memory overflow vulnerability in Citrix NetScaler ADC and
Citrix NetSc ...)
- TODO: check
+ NOT-FOR-US: NetScaler
CVE-2026-88774 (Vulnerability in Citrix NetScaler ADC and Citrix NetScaler
Gateway. T ...)
- TODO: check
+ NOT-FOR-US: NetScaler
CVE-2026-88773 (Inconsistent interpretation of HTTP requests ('HTTP
Request/Response s ...)
- TODO: check
+ NOT-FOR-US: NetScaler
CVE-2026-88772 (Vulnerability in Citrix NetScaler ADC and Citrix NetScaler
Gateway. T ...)
- TODO: check
+ NOT-FOR-US: NetScaler
CVE-2026-88771 (Improper input validation vulnerability in Citrix NetScaler
ADC and Ci ...)
- TODO: check
+ NOT-FOR-US: NetScaler
CVE-2026-15442 (In all builds that make use of (D)TLS, including default
builds, there ...)
TODO: check
CVE-2026-101061 (utcp-gql before 1.1.1 and utcp-websocket before 1.1.1 contain
server-s ...)
@@ -71,7 +71,7 @@ CVE-2026-101044 (pacquet, the Rust package-manager component
shipped in the pnpm
CVE-2026-101043 (pnpm versions 11.0.0 before 11.11.0 and 10.7.0 before 10.34.5
expand $ ...)
TODO: check
CVE-2026-101042 (Parse Server is an open-source backend server. In versions >=
9.0.0 < ...)
- TODO: check
+ NOT-FOR-US: Parse Server
CVE-2026-101041 (The account recovery (password reset) functionality in the
vulnerabili ...)
TODO: check
CVE-2026-101033 (KitchenOwl through 0.7.10 fails to verify that category IDs
belong to ...)
@@ -99,11 +99,11 @@ CVE-2026-100867 (spaceship-prompt through 4.22.5 fails to
sanitize control chara
CVE-2026-100866 (onefetch through 2.28.1 writes repository information field
values to ...)
TODO: check
CVE-2026-100749 (Joomla Extension - svenbluege.de - CSRF in backend cleanup
actions in ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-100748 (Joomla Extension - svenbluege.de - CSRF in various cart
actions in Eve ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-100747 (Joomla Extension - svenbluege.de - CSRF in image upload in
Event Galle ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-100741 (Eval injection in the JScript event-script dispatcher in
Progressive R ...)
TODO: check
CVE-2026-XXXX [Infinite loops and heap OOB read when parsing malformed ASF
headers]
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6e59096e0116fb8f32fcc35d20e6d3303d253930
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6e59096e0116fb8f32fcc35d20e6d3303d253930
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
