Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
53ae457e by Moritz Muehlenhoff at 2026-09-28T13:02:31+02:00
new qt-declarative issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -5318,7 +5318,10 @@ CVE-2026-80379 (IBM DataStage on Cloud Pak for Data
5.4.0.0 could allow a remote
CVE-2026-80338 (The CMB2 WordPress plugin before 2.13.0 does not perform any
capabilit ...)
NOT-FOR-US: WordPress plugin
CVE-2026-79616 (Out-of-bounds read while parsing untrusted SVG path strings in
Qt Quic ...)
- TODO: check
+ - qt6-declarative 6.11.2+dfsg-3
+ - qtdeclarative-opensource-src <unfixed>
+ NOTE: https://codereview.qt-project.org/c/qt/qtdeclarative/+/754718
+ NOTE:
https://github.com/qt/qtdeclarative/commit/0aba8c7674dbbbaaa142775247249e297a339c85
CVE-2026-79310 (webpy web.py 0.76 is vulnerable to server-side template
injection (SST ...)
- web2py <unfixed>
NOTE:
https://github.com/lichoin/TraceLoom/blob/main/CVEs/CVE-2026-79310.md
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/53ae457e2345bed18ace75c37c370a2f97d5e866
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/53ae457e2345bed18ace75c37c370a2f97d5e866
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
