Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
53c1f99b by Salvatore Bonaccorso at 2026-10-01T14:39:51+02:00
CVE-2026-79616: Add commit reference in v6.11.2
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -9700,7 +9700,7 @@ CVE-2026-79616 (Out-of-bounds read while parsing
untrusted SVG path strings in Q
- qtdeclarative-opensource-src <unfixed>
[trixie] - qtdeclarative-opensource-src <no-dsa> (Minor issue)
NOTE: https://codereview.qt-project.org/c/qt/qtdeclarative/+/754718
- NOTE:
https://github.com/qt/qtdeclarative/commit/0aba8c7674dbbbaaa142775247249e297a339c85
+ NOTE:
https://github.com/qt/qtdeclarative/commit/34a90737c73d5fb9043367fdf944a553f82f9053
(v6.11.2)
CVE-2026-79310 (webpy web.py 0.76 is vulnerable to server-side template
injection (SST ...)
- web2py <unfixed>
[trixie] - web2py <no-dsa> (Minor issue)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/53c1f99b719268ad01ac51e0c4b8cf9ab5314fa7
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/53c1f99b719268ad01ac51e0c4b8cf9ab5314fa7
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
