Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
fbe9f08f by Salvatore Bonaccorso at 2026-10-07T23:08:04+02:00
Add CVE-2026-107313/libpgjava
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -171,7 +171,11 @@ CVE-2026-19186 (ieee802154_decipher_data_frame() in
subsys/net/l2/ieee802154/iee
CVE-2026-15894 (The Bluetooth Mesh On-Demand Private Proxy solicitation
handler in sub ...)
NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-107313 (pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 and
42.7.5 can sen ...)
- TODO: check
+ - libpgjava 42.7.7-1
+ [bookworm] - libpgjava <not-affected> (Vulnerable code not present)
+ NOTE:
https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-hggc-j2qh-988m
+ NOTE: https://github.com/pgjdbc/pgjdbc/pull/3500
+ NOTE: Fixed by:
https://github.com/pgjdbc/pgjdbc/commit/96f6862bb6bcadde7620688c7bce73f2d01a7ebb
(REL42.7.6-rc1)
CVE-2026-107278 (MISP contains a validation flaw in its object synchronization
logic. W ...)
TODO: check
CVE-2026-107276 (MISP contains a race condition in the email-based one-time
password (O ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fbe9f08f75251ea0f51c725e70270e591872d638
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fbe9f08f75251ea0f51c725e70270e591872d638
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
