Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
062abef2 by Salvatore Bonaccorso at 2026-10-04T21:39:15+02:00
Add Debian bug references for various issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -528,7 +528,7 @@ CVE-2026-95670 (The No External Links plugin for WordPress
is vulnerable to Stor
CVE-2026-95662 (Cross-Site Scripting vulnerability in the Repasat application.
Success ...)
NOT-FOR-US: Repasat
CVE-2026-95512 (A flaw was found in FreeType, specifically within its CID font
loader. ...)
- - freetype <unfixed>
+ - freetype <unfixed> (bug #1149953)
[bookworm] - freetype <postponed> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2462295
NOTE: Fixed by:
https://gitlab.freedesktop.org/freetype/freetype/-/commit/f3ca71c9900fe860849b3163a6e2c1e765b291d9
@@ -1509,7 +1509,7 @@ CVE-2026-100251 (Wormhole.app as deployed before
2026-08-22 misconfigures the co
CVE-2025-71427 (Office-PowerPoint-MCP-Server through 2.0.7 contains a path
traversal v ...)
NOT-FOR-US: Office-PowerPoint-MCP-Server
CVE-2026-94603
- - podman <unfixed>
+ - podman <unfixed> (bug #1149955)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2542566
NOTE:
https://github.com/podman-container-tools/podman/security/advisories/GHSA-2cvf-wqm6-wr9g
NOTE: Fixed by:
https://github.com/podman-container-tools/podman/commit/3721ff82ffb44a4ceeaecc5abd3808e924a6b669
(main)
@@ -4786,7 +4786,7 @@ CVE-2026-103270 (LightLLM through 1.2.0 mounts
reinforcement learning control ro
CVE-2026-103243 (LightLLM through 1.2.0 fails to validate image_url and
audio_url param ...)
NOT-FOR-US: LightLLM
CVE-2026-103242 (A heap-based buffer overflow flaw was found in rpm.
RPMTAG_FILESIGNATU ...)
- - rpm <unfixed>
+ - rpm <unfixed> (bug #1149951)
[trixie] - rpm <no-dsa> (Minor issue)
[bookworm] - rpm <postponed> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2543866
@@ -5613,7 +5613,7 @@ CVE-2026-96429 (SQL Injection in the
/WebAgenda/SMBAjaxConfigProcess.do API endp
CVE-2026-96428 (SQL Injection in the /WebAgenda/SMBAjaxAutoComplete.do API
endpoint of ...)
NOT-FOR-US: Flowring Agentflow
CVE-2026-95520 (A heap-based buffer overflow flaw was found in rpm. Parsing a
symlink ...)
- - rpm <unfixed>
+ - rpm <unfixed> (bug #1149951)
[trixie] - rpm <no-dsa> (Minor issue)
[bookworm] - rpm <postponed> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2537809
@@ -11385,12 +11385,12 @@ CVE-2026-96515 (This vulnerability exists in the
Netlink ICT HG323RW router due
CVE-2026-95985 (The file write tool in Amazon Kiro IDE versions before 1.0.242
might a ...)
NOT-FOR-US: Amazon
CVE-2026-95521 (A command injection flaw was found in rpm. Installing or
rebuilding a ...)
- - rpm <unfixed>
+ - rpm <unfixed> (bug #1149951)
[trixie] - rpm <no-dsa> (Minor issue)
[bookworm] - rpm <postponed> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2537812
CVE-2026-95519 (A flaw was found in rpm. An attacker can supply a crafted
manifest fil ...)
- - rpm <unfixed>
+ - rpm <unfixed> (bug #1149951)
[trixie] - rpm <no-dsa> (Minor issue)
[bookworm] - rpm <postponed> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2470977
@@ -11525,7 +11525,7 @@ CVE-2026-88373 (libde265 commit 4d45a6b contains a NULL
pointer dereference vuln
NOTE: https://github.com/strukturag/libde265/issues/534
NOTE: Fixed by:
https://github.com/strukturag/libde265/commit/f8d324914e43d92af23614f22959cf9eee7bf9ea
(v1.1.2)
CVE-2026-88372 (libsndfile 1.2.2 contains an integer overflow vulnerability in
mat4_re ...)
- - libsndfile <unfixed>
+ - libsndfile <unfixed> (bug #1149957)
[trixie] - libsndfile <postponed> (Minor issue, revisit when fixed
upstream)
[bookworm] - libsndfile <postponed> (Minor issue)
NOTE: https://github.com/libsndfile/libsndfile/issues/1151
@@ -17802,7 +17802,7 @@ CVE-2026-77568
REJECTED
CVE-2026-77396 (PJSIP is a free and open source multimedia communication
library writt ...)
- pjproject <removed>
- - asterisk <unfixed>
+ - asterisk <unfixed> (bug #1149963)
NOTE:
https://github.com/pjsip/pjproject/security/advisories/GHSA-6p2p-5wf8-h5hr
NOTE: Fixed by:
https://github.com/pjsip/pjproject/commit/7ecc6584969a923c4190b6912afbf5952b5a4b9f
CVE-2026-77386 (Kyoo is a self-hosted media server focused on movies, series,
and anim ...)
@@ -28895,7 +28895,7 @@ CVE-2026-85921 (Double free in Windows Secure Kernel
Mode allows an authorized a
CVE-2026-85892 (Concurrent execution using shared resource with improper
synchronizati ...)
NOT-FOR-US: Microsoft
CVE-2026-84445 (gRPC-Go is the Go language implementation of gRPC. Prior to
1.82.2 and ...)
- - golang-google-grpc <unfixed>
+ - golang-google-grpc <unfixed> (bug #1149961)
[trixie] - golang-google-grpc <no-dsa> (Minor issue)
[bookworm] - golang-google-grpc <postponed> (Limited support, minor
issue; DoS, clean crash)
NOTE:
https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj
@@ -29904,7 +29904,7 @@ CVE-2026-90461 (OpenStack Ironic through 38.0.0 may
send a username and password
[trixie] - ironic <no-dsa> (Minor issue)
NOTE: https://bugs.launchpad.net/ironic/+bug/2162816
CVE-2026-90460 (An issue was discovered in OpenStack Keystone before 29.0.3.
Tokens ob ...)
- - keystone <unfixed>
+ - keystone <unfixed> (bug #1149956)
[trixie] - keystone <no-dsa> (Minor issue)
[bookworm] - keystone <postponed> (Minor issue)
NOTE: https://bugs.launchpad.net/keystone/+bug/2159643
@@ -32508,7 +32508,7 @@ CVE-2026-79591 (A heap-buffer-overflow and
use-after-free vulnerability exists i
NOTE: Fixed by:
https://github.com/libxls/libxls/commit/881f6ec3dabb017af878949a6ed7167613bd7a69
NOTE: https://github.com/tidyverse/readxl/issues/795
CVE-2026-79590 (A NULL pointer dereference vulnerability exists in the Prism
parser co ...)
- - mruby <unfixed>
+ - mruby <unfixed> (bug #1149962)
[trixie] - mruby <no-dsa> (Minor issue)
[bookworm] - mruby <postponed> (Minor issue)
NOTE: https://github.com/mruby/mruby/issues/7032
@@ -33265,7 +33265,7 @@ CVE-2026-87995 (Open WebUI is an extensible,
feature-rich, and user-friendly sel
CVE-2026-87994 (Open WebUI is an extensible, feature-rich, and user-friendly
self-host ...)
NOT-FOR-US: Open WebUI
CVE-2026-87933 (A vulnerability was found in DaveGamble cJSON up to 1.7.19.
The affect ...)
- - cjson <unfixed>
+ - cjson <unfixed> (bug #1149958)
NOTE: https://github.com/DaveGamble/cJSON/issues/1060
NOTE: https://github.com/DaveGamble/cJSON/pull/1065
NOTE: Fixed by:
https://github.com/DaveGamble/cJSON/commit/6d9f2443ab071f86e5d9b43025a40929ec41c46c
@@ -33514,7 +33514,7 @@ CVE-2026-87875 (The cupsUTF32ToUTF8() function in
CUPS's cups/transcode.c lacks
- cups <unfixed> (bug #1147521)
NOTE:
https://github.com/OpenPrinting/cups/security/advisories/GHSA-559w-7676-3xrq
CVE-2026-87874 (A flaw was found in the memcached cache plugin of the
community.genera ...)
- - ansible <unfixed>
+ - ansible <unfixed> (bug #1149959)
[trixie] - ansible <no-dsa> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2530995
CVE-2026-87872 (A flaw was found in the OCAPI modules (ocapi_command,
ocapi_info) of t ...)
@@ -39215,7 +39215,7 @@ CVE-2026-16310 (The MemberDash plugin for WordPress is
vulnerable to Insecure Di
CVE-2026-13159 (The Real Estate Papi WordPress theme through 1.0.5 does not
perform ca ...)
NOT-FOR-US: WordPress plugin
CVE-2026-85498 [Regression in CVE-2026-4897 fix (polkit read_cookie()) - stack
buffer underflow]
- - policykit-1 <unfixed>
+ - policykit-1 <unfixed> (bug #1149960)
[trixie] - policykit-1 <not-affected> (Fix for CVE-2026-4897 not
applied)
[bookworm] - policykit-1 <not-affected> (Fix for CVE-2026-4897 not
applied)
NOTE: https://github.com/polkit-org/polkit/pull/702
@@ -48574,7 +48574,7 @@ CVE-2026-64896 (Debug and Test Interface With Improper
Access Control vulnerabil
CVE-2026-5738 (Improper neutralization of input during web page generation
('cross-si ...)
NOT-FOR-US: DoXBASE
CVE-2026-5680 (A flaw was found in Undertow. A remote attacker could exploit
this vul ...)
- - undertow <unfixed>
+ - undertow <unfixed> (bug #1149964)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2455350
CVE-2026-5218 (Improper neutralization of Script-Related HTML tags in a web
page (bas ...)
NOT-FOR-US: E-Commerce Pack
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/062abef2f50cf3b791d525c215e5c7e07e48b877
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/062abef2f50cf3b791d525c215e5c7e07e48b877
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
