Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
1eff97cc by Salvatore Bonaccorso at 2026-10-01T21:28:52+02:00
Add CVE-2026-77387/geopy
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -111,7 +111,11 @@ CVE-2026-78249 (A path traversal vulnerability exists in
the web management inte
CVE-2026-78242 (Insertion of sensitive information into log file vulnerability
in Apac ...)
NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-77387 (geopy is a geocoding library for Python. Prior to 2.5.0,
geopy.Point a ...)
- TODO: check
+ - geopy <unfixed>
+ NOTE:
https://github.com/geopy/geopy/security/advisories/GHSA-mhvh-fq92-pfmr
+ NOTE: https://github.com/geopy/geopy/issues/608
+ NOTE: https://github.com/geopy/geopy/pull/610
+ NOTE: Fixed by:
https://github.com/geopy/geopy/commit/5d09fa843f90ec80788b61552539c9fd3ae6c528
(2.5.0)
CVE-2026-75957 (The Ultimate Multisite \u2013 WordPress Multisite SaaS & WaaS
Platform ...)
NOT-FOR-US: WordPress plugin
CVE-2026-75786 (Unsanitized concatenation of the module parameter in the
Grafana datas ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1eff97ccee59e9194c8cf6f9a983032b43924a81
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1eff97ccee59e9194c8cf6f9a983032b43924a81
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
