Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2407a06c by Salvatore Bonaccorso at 2026-10-01T07:17:22+02:00
Add two new Zammad issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -798,9 +798,9 @@ CVE-2026-102509 (Memory Allocation with Excessive Size
Value, Allocation of Reso
CVE-2026-102508 (Improper Verification of Cryptographic Signature and Improper
Certific ...)
NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-102490 (All versions of Zammad including the latest alpha enable the
local zam ...)
- TODO: check
+ - zammad <itp> (bug #841355)
CVE-2026-102489 (Zammad versions 6.3.0 to 6.5.4 are vulnerable a session
hijack vulnera ...)
- TODO: check
+ - zammad <itp> (bug #841355)
CVE-2026-102459 (EasyFlow .NET developed by Digiwin has a Reflected Cross-site
Scriptin ...)
NOT-FOR-US: Digiwin
CVE-2026-102458 (EasyFlow .NET developed by Digiwin has a Missing
Authentication vulner ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2407a06c10a00159441e76f8c534464449080a4e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2407a06c10a00159441e76f8c534464449080a4e
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
