Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
54a0dcb9 by Moritz Muehlenhoff at 2026-09-27T22:58:56+02:00
bugnums
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1356,64 +1356,64 @@ CVE-2026-6083 (Stored Cross-Site Scripting (XSS)
vulnerability in StockAgile API
CVE-2026-6082 (Stored Cross-Site Scripting (XSS) vulnerability in StockAgile
API and ...)
NOT-FOR-US: StockAgile
CVE-2026-67421 (RabbitMQ is a messaging and streaming broker. From 3.13.0
until 3.13.1 ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
NOTE:
https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-6256-27fm-4rgr
NOTE:
https://github.com/rabbitmq/rabbitmq-server/commit/ff595eaaa6d4f580f72fa04801ffd35f48c46027
(v4.3.5)
CVE-2026-67420 (RabbitMQ is a messaging and streaming broker. From 3.13.0
until 3.13.1 ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
NOTE:
https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-86fm-44m9-rqjx
NOTE:
https://github.com/rabbitmq/rabbitmq-server/commit/5de287d213765ca592ff5848ad2f6b9b98ee6772
(v4.3.5)
CVE-2026-67419 (RabbitMQ is a messaging and streaming broker. Prior to 4.3.5,
an authe ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
[trixie] - rabbitmq-server <not-affected> (Vulnerable code not present,
only affects 4.3.x)
[bookworm] - rabbitmq-server <not-affected> (Vulnerable code not
present, only affects 4.3.x)
NOTE:
https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-h964-v5mf-22cq
NOTE:
https://github.com/rabbitmq/rabbitmq-server/commit/c5ed7c4e97e02be688730803604cc7a88dbe4864
(v4.3.5)
CVE-2026-67415 (RabbitMQ is a messaging and streaming broker. From 4.2.0 until
4.2.9 a ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
[trixie] - rabbitmq-server <not-affected> (Vulnerable code not present,
only affects 4.2.x and later)
[bookworm] - rabbitmq-server <not-affected> (Vulnerable code not
present, only affects 4.2.x and later)
NOTE:
https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-8mpg-qw9r-m5cr
CVE-2026-67413 (RabbitMQ is a messaging and streaming broker. From 4.0.0 until
4.0.23, ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
NOTE:
https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-chxf-3hfg-j8f7
CVE-2026-67412 (RabbitMQ is a messaging and streaming broker. From 3.13.0
until 4.3.3, ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
NOTE:
https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-42pc-678q-v8qj
CVE-2026-67411 (RabbitMQ is a messaging and streaming broker. From 3.13.0
until 3.13.1 ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
NOTE:
https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-4r6f-9cpw-f6g6
CVE-2026-67410 (RabbitMQ is a messaging and streaming broker. From 4.2.0 until
4.3.3 a ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
[trixie] - rabbitmq-server <not-affected> (Vulnerable code not present,
only affects 4.2.x and later)
[bookworm] - rabbitmq-server <not-affected> (Vulnerable code not
present, only affects 4.2.x and later)
NOTE:
https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-f9f2-q3jf-wfj3
CVE-2026-67409 (RabbitMQ is a messaging and streaming broker. From 3.13.0
until 4.3.3, ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
NOTE:
https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-qw3h-qqm9-jrw8
CVE-2026-67408 (RabbitMQ is a messaging and streaming broker. From 4.1.0 until
4.3.3, ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
[trixie] - rabbitmq-server <not-affected> (Vulnerable code not present,
only affects 4.1.x and later)
[bookworm] - rabbitmq-server <not-affected> (Vulnerable code not
present, only affects 4.1.x and later)
NOTE:
https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-2hm4-4438-49q8
CVE-2026-67407 (RabbitMQ is a messaging and streaming broker. From 4.0.0 until
4.3.3 a ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
NOTE:
https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-q46v-hrvq-hp24
CVE-2026-67406 (RabbitMQ is a messaging and streaming broker. From 4.0.0 until
4.3.3, ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
NOTE:
https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-q44f-9vc5-grh7
CVE-2026-67242 (RabbitMQ is a messaging and streaming broker. From 4.2.0 until
4.2.9 a ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
[trixie] - rabbitmq-server <not-affected> (Vulnerable code not present,
only affects 4.2.x and later)
[bookworm] - rabbitmq-server <not-affected> (Vulnerable code not
present, only affects 4.2.x and later)
NOTE:
https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-rrj4-g94f-rqj9
CVE-2026-67241 (RabbitMQ is a messaging and streaming broker. From 4.2.0 until
4.2.9 a ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
[trixie] - rabbitmq-server <not-affected> (Vulnerable code not present,
only affects 4.2.x and later)
[bookworm] - rabbitmq-server <not-affected> (Vulnerable code not
present, only affects 4.2.x and later)
NOTE:
https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-rg2g-289m-xhhw
CVE-2026-67239 (RabbitMQ is a messaging and streaming broker. From 3.13.0
until 3.13.1 ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
NOTE:
https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-xm9p-57xv-vxwc
CVE-2026-67237 (RabbitMQ is a messaging and streaming broker. From 4.2.0 until
4.2.8 a ...)
- rabbitmq-server 4.3.2-1
@@ -1443,7 +1443,7 @@ CVE-2026-67225 (RabbitMQ is a messaging and streaming
broker. From 3.13.0 until
- rabbitmq-server 4.3.0-2
NOTE:
https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-c8c4-gvv4-8j3q
CVE-2026-67223 (RabbitMQ is a messaging and streaming broker. The advisory
establishes ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
NOTE:
https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-9x7r-g78c-5835
CVE-2026-67222 (RabbitMQ is a messaging and streaming broker. From 3.13.0
until 3.13.1 ...)
- rabbitmq-server 4.3.0-2
@@ -1480,7 +1480,7 @@ CVE-2026-62062 (Cross-Site Request Forgery (CSRF)
vulnerability in Elementor Web
CVE-2026-61855 (Zammad is a web based open source helpdesk/customer support
system. In ...)
- zammad <itp> (bug #841355)
CVE-2026-61837 (RabbitMQ is a messaging and streaming broker. From 4.0.0 until
4.3.3, ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
NOTE:
https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-w9hf-476r-443x
CVE-2026-61525 (Zammad is a web based open source helpdesk/customer support
system. In ...)
- zammad <itp> (bug #841355)
@@ -17957,7 +17957,7 @@ CVE-2026-19774 (BlueZ A2DP Stack-based Buffer Overflow
Remote Code Execution Vul
NOTE: https://github.com/bluez/bluez/pull/2251
NOTE: Fixed by:
https://github.com/bluez/bluez/commit/912f5efb0dd9bb08e408d33371a57182c5678aef
(5.87)
CVE-2026-19773 (libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds
Write Rem ...)
- - libwebsockets <unfixed>
+ - libwebsockets <unfixed> (bug #1149178)
NOTE: https://www.zerodayinitiative.com/advisories/ZDI-26-590/
NOTE: Fixed by:
https://github.com/warmcat/libwebsockets/commit/824151862f37bc72f46d9a3e01d5b9408d313a0b
(v5.0.0)
CVE-2026-19641 (On affected platforms running Arista EOS with password
authentication ...)
@@ -129181,7 +129181,7 @@ CVE-2026-42347
CVE-2026-41917 (OpenKM 6.3.12 contains a local file inclusion vulnerability in
the adm ...)
NOT-FOR-US: OpenKM
CVE-2026-41401 (libyang before 5.2.6 contains a heap use-after-free write
vulnerabilit ...)
- - libyang <unfixed>
+ - libyang <unfixed> (bug #1149179)
[trixie] - libyang <no-dsa> (Minor issue)
[bullseye] - libyang <no-dsa> (Minor issue)
- libyang2 <removed>
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/54a0dcb95fadcada2179aef7709a9eca7432011e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/54a0dcb95fadcada2179aef7709a9eca7432011e
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
