Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e4c9af7f by Salvatore Bonaccorso at 2026-10-02T22:24:06+02:00
Process new ghost issues, itp'ed
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -546,21 +546,21 @@ CVE-2026-104420 (Zebra before 6.3.0 contains a protection
mechanism failure that
CVE-2026-104419 (Zebra (zebrad) 4.5.0 before 6.3.0 discards which peer
supplied the blo ...)
TODO: check
CVE-2026-104418 (Ghost from 6.10.3 before 6.64.0 contains a remote code
execution vulne ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-104417 (Ghost from 1.20.0 before 6.64.0 contains a path traversal
vulnerabilit ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-104416 (Ghost from 4.39.0 before 6.64.0 contains an information
disclosure vul ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-104415 (Ghost from 0.7.2 before 6.64.0 contains an information
disclosure vuln ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-104414 (Ghost from 2.5.0 before 6.64.0 contains a stored cross-site
scripting ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-104413 (Ghost from 5.94.0 before 6.64.0 contains a stored cross-site
scripting ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-104412 (Ghost 0.5.0 before 6.64.0 does not correctly restrict staff
role assig ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-104411 (Ghost from 6.22.1 before 6.64.0 contains a stored cross-site
scripting ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-104410 (SiYuan before 3.8.5 contains an information disclosure
vulnerability t ...)
NOT-FOR-US: SiYuan
CVE-2026-104403 (Authorization Bypass Through User-Controlled Key
vulnerability in Thim ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e4c9af7f4fae7b1d21e898eec8bdd45ba5254b31
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e4c9af7f4fae7b1d21e898eec8bdd45ba5254b31
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
