Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d27735a6 by Salvatore Bonaccorso at 2026-10-02T21:02:22+02:00
Add Debian bug references for various issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -339,10 +339,10 @@ CVE-2026-94603
- podman <unfixed>
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2542566
CVE-2026-86345 (A flaw was found in 389-ds-base. The server does not discard
plaintext ...)
- - 389-ds-base <unfixed>
+ - 389-ds-base <unfixed> (bug #1149731)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2529332
CVE-2026-86344 (A flaw was found in 389-ds-base. An unauthenticated remote
attacker ca ...)
- - 389-ds-base <unfixed>
+ - 389-ds-base <unfixed> (bug #1149732)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2529329
TODO: check, not details provided on 2026-10-02 in Red Hat bugzilla
CVE-2026-9864 (Fortra BoKS Server Agent contains a predictable password
generation vu ...)
@@ -7691,13 +7691,13 @@ CVE-2026-95866 (The User Profile Builder \u2013
Beautiful User Registration Form
CVE-2026-95864 (The Themify Builder plugin for WordPress is vulnerable to
Stored Cross ...)
NOT-FOR-US: WordPress plugin
CVE-2026-95835 (Missing Authorization in the askpass escape code handler in
kitty from ...)
- - kitty <unfixed>
+ - kitty <unfixed> (bug #1149729)
NOTE: Fixed by:
https://github.com/kovidgoyal/kitty/commit/3281919056c442e4ba6f5abed7ee2c5130de31ff
(v0.49.0)
CVE-2026-95834 (Use After Free in the drag source path of the drag and drop
protocol i ...)
- - kitty <unfixed>
+ - kitty <unfixed> (bug #1149729)
NOTE: Fixed by:
https://github.com/kovidgoyal/kitty/commit/b54bfbb4f85f992edca9b04f5c0c2612454eec23
(v0.49.0)
CVE-2026-95832 (Improper Neutralization of Special Elements in Output Used by
a Downst ...)
- - kitty <unfixed>
+ - kitty <unfixed> (bug #1149729)
NOTE: Fixed by:
https://github.com/kovidgoyal/kitty/commit/03fbdad855490470233954bc810e517027e5e640
(0.49.0)
NOTE: Fixed by:
https://github.com/kovidgoyal/kitty/commit/57bb144d96c0f9d48a2b0a6d43c9a23d2a091cbf
(0.49.0)
CVE-2026-95699 (Prior to 9/18/2026, the iSteamX mobile application's AWS
policy could ...)
@@ -7901,13 +7901,13 @@ CVE-2026-81630 (The Botslab G980H dash camera firmware
does not adequately verif
CVE-2026-80514 (The wpForo Forum WordPress plugin from 3.0.0 before 3.1.6 does
not ver ...)
NOT-FOR-US: WordPress plugin
CVE-2026-80432 (Missing Authorization in the drop handling path of the drag
and drop p ...)
- - kitty <unfixed>
+ - kitty <unfixed> (bug #1149729)
NOTE:
https://github.com/kovidgoyal/kitty/commit/026d11f517da17bfd3c35ea502057babdfbe5828
(v0.49.0)
CVE-2026-80431 (Out-of-bounds Write in the natural width branch of the text
sizing pro ...)
- - kitty <unfixed>
+ - kitty <unfixed> (bug #1149729)
NOTE: Fixed by:
https://github.com/kovidgoyal/kitty/commit/7d2fbaadcc2b1eeeef89bd875ec622b42362574b
(v0.49.0)
CVE-2026-80430 (Improper Link Resolution Before File Access in the drag source
staging ...)
- - kitty <unfixed>
+ - kitty <unfixed> (bug #1149729)
NOTE: Fixed by:
https://github.com/kovidgoyal/kitty/commit/554908ed0b4d010cf9821c75449c7f7c79a6170a
(0.49.0)
NOTE: Fixed by:
https://github.com/kovidgoyal/kitty/commit/3c3133d3399257492347f535d8d191680803b25d
(0.49.0)
CVE-2026-79959 (The Botslab G980H dash camera firmware contains a hard-coded
root acco ...)
@@ -15349,7 +15349,7 @@ CVE-2026-93964 (A vulnerability was detected in
NginxProxyManager nginx-proxy-ma
CVE-2026-93963 (A security vulnerability has been detected in itsourcecode
Leave Manag ...)
NOT-FOR-US: itsourcecode System
CVE-2026-93962 (A weakness has been identified in Kamailio up to
5.8.8/6.0.7/6.1.4/6.2 ...)
- - kamailio <unfixed>
+ - kamailio <unfixed> (bug #1149730)
[trixie] - kamailio <postponed> (Minor issue, fix along with future DSA)
NOTE: https://github.com/kamailio/kamailio/issues/4876
NOTE: https://github.com/kamailio/kamailio/pull/4877
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d27735a6457c4e093365ef6f147abc54c667f579
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d27735a6457c4e093365ef6f147abc54c667f579
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
