Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
7c807c0c by Salvatore Bonaccorso at 2026-10-06T14:20:19+02:00
Add Debian bug reference for various issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1319,7 +1319,7 @@ CVE-2026-19184 (The NXP GAU ADC driver
(drivers/adc/adc_mcux_gau_adc.c) validate
CVE-2026-12171 (auto-changelog before 2.6.1 merges configuration from inside
the targe ...)
NOT-FOR-US: auto-changelog
CVE-2026-105712 (gpgtar in GnuPG before 2.5.19 can allow file overwrite via
crafted dat ...)
- - gnupg2 <unfixed>
+ - gnupg2 <unfixed> (bug #1150168)
NOTE: https://static.dev.gnupg.org/T8159.html
NOTE: Fixed by:
https://github.com/gpg/gnupg/commit/7a2692fe5e580ae3bbb2a47abc4baaf1af65aa88
(gnupg-2.5.19)
NOTE:
https://lists.gnupg.org/pipermail/gnupg-announce/2026q2/000504.html
@@ -1386,7 +1386,7 @@ CVE-2026-105326 (An argument injection flaw was found in
CUPS. When email notifi
NOTE:
https://github.com/OpenPrinting/cups/security/advisories/GHSA-r4wf-366f-f6g3
NOTE: Fixed by:
https://github.com/OpenPrinting/cups/commit/611d1bd3bdf832363832383567906a6d7fd6c47d
(v2.4.20)
CVE-2026-105315 (A vulnerability has been found in django-haystack up to
3.3.0. Affecte ...)
- - django-haystack <unfixed>
+ - django-haystack <unfixed> (bug #1150169)
NOTE:
https://github.com/django-haystack/django-haystack/security/advisories/GHSA-r3hx-x5rh-p9vv
NOTE: Fixed by:
https://github.com/django-haystack/django-haystack/commit/eb05f193c9771a68dcc8cfac6674a0d48a52ee9d
(v3.4.0)
CVE-2026-105314 (Papermerge 3.5.3 allows remote code execution by a standard
user via d ...)
@@ -1410,7 +1410,7 @@ CVE-2026-105285 (A security vulnerability has been
detected in Totolink A3002MU
CVE-2026-105284 (A weakness has been identified in Totolink A3002MU
1.0.0-B20230403.145 ...)
NOT-FOR-US: TOTOLINK
CVE-2026-105263 (A security flaw has been discovered in Shaarli up to 0.16.3.
The affec ...)
- - shaarli <unfixed>
+ - shaarli <unfixed> (bug #1150167)
NOTE:
https://github.com/shaarli/Shaarli/security/advisories/GHSA-85jx-fhrf-q9w7
NOTE: Fixed by:
https://github.com/shaarli/Shaarli/commit/8ca4de8e7c932a684481f5fbb1229fe16de1f4d2
(v0.16.4)
CVE-2026-105254 (A vulnerability was identified in itsourcecode Online
Admission System ...)
@@ -10513,7 +10513,7 @@ CVE-2026-100668 (Grav 2.0.0 through 2.0.24 contain a
Twig content sandbox escape
CVE-2026-100667 (grav-plugin-login (the Grav CMS Login plugin) versions >=
3.8.7 and < ...)
NOT-FOR-US: Grav CMS plugin
CVE-2026-100666 (Netty's HttpServerCodec (io.netty:netty-codec-http) in
versions 4.2.0. ...)
- - netty <unfixed>
+ - netty <unfixed> (bug #1150165)
NOTE:
https://github.com/netty/netty/security/advisories/GHSA-2g6j-r8q9-5hr8
CVE-2026-100665 (Netty versions from 4.2.11.Final before 4.2.18.Final contain
an incomp ...)
- netty <not-affected> (Vulnerable code not present)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7c807c0c7395f0f4c2af03c5d149cf66c89544c4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7c807c0c7395f0f4c2af03c5d149cf66c89544c4
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
