Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
550cadc4 by Salvatore Bonaccorso at 2026-10-08T21:24:09+02:00
Add Debian bug references for various issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -709,36 +709,36 @@ CVE-2026-106571 (ImageMagick is free and open-source
software used for editing a
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/8f3a15e60b723bfe3e80bd1b5e4bee88397467f7
(7.1.2-31)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/91f4ed74a1fd8326ade11a1153de110f22d89aa1
(6.9.13-56)
CVE-2026-106570 (ImageMagick is free and open-source software used for editing
and mani ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150337)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2vwg-3g4g-qprm
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/cafc7372c8113a9636766f0eddde7b90373c9b44
(7.1.2-32)
CVE-2026-106569 (ImageMagick is free and open-source software used for editing
and mani ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150337)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-gwj6-pm7x-3r63
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/0691546106f4c7e8857da9f21a0e4a8f41915388
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/5ecd5b047cee7ccfe4e14a733a0755c7b2a90c7d
(7.1.2-32)
CVE-2026-106568 (ImageMagick is free and open-source software used for editing
and mani ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150337)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9p7q-63hw-mcr4
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/e4f7ad983df6c831832eba3689f96b75f8b67051
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/27e36ca5cb446664bfc284d28d91fced8887b025
(6.9.13-57)
CVE-2026-106567 (ImageMagick is free and open-source software used for editing
and mani ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150337)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g6p6-3ggg-3w7j
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/f053f778409932d55b95758c4b1516b63191d1eb
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/61024a2677a3c7973a2dd27170877d8e51419473
(6.9.13-57)
CVE-2026-106566 (ImageMagick is free and open-source software used for editing
and mani ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150337)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-54hm-vrmh-75qj
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/48e5ce1779fc640a389f0020fd7d965d0c08236e
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/11d2af00a948e9ca2919d9a8684d335a48484094
(6.9.13-57)
CVE-2026-106565 (ImageMagick is free and open-source software used for editing
and mani ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150337)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m9c7-gf3j-hx6h
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/e9872c4a165d869e75d10799c47195725ebf4132
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/82f752927a552cbba1213b1d023b85e76845774c
(6.9.13-57)
CVE-2026-106564 (ImageMagick is free and open-source software used for editing
and mani ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150337)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-54rx-5x9g-g465
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/f7437ebafcd92d6959eca4086d80b150d52bdb7c
(7.1.2-32)
CVE-2026-106563 (Backstage is an open framework for building developer
portals. Prior t ...)
@@ -762,19 +762,19 @@ CVE-2026-106510 (Backstage is an open framework for
building developer portals.
CVE-2026-106164 (In Progress\xae Telerik\xae Document Processing
SpreadProcessing libra ...)
NOT-FOR-US: Progress Software
CVE-2026-106067 (A heap-based buffer overflow was found in GIMP\u2019s Hot
color filter ...)
- - gimp <unfixed>
+ - gimp <unfixed> (bug #1150342)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2547461
NOTE: https://gitlab.gnome.org/GNOME/gimp/-/work_items/16801
CVE-2026-106066 (A heap-based buffer overflow was found in GIMP\u2019s raw
data export ...)
- - gimp <unfixed>
+ - gimp <unfixed> (bug #1150341)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2547459
NOTE: https://gitlab.gnome.org/GNOME/gimp/-/work_items/16801
CVE-2026-106065 (A heap-based buffer overflow was found in GIMP\u2019s PCX
export plug- ...)
- - gimp <unfixed>
+ - gimp <unfixed> (bug #1150340)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2547456
NOTE: https://gitlab.gnome.org/GNOME/gimp/-/work_items/16801
CVE-2026-106064 (A heap-based buffer overflow was found in GIMP\u2019s GIF
export plug- ...)
- - gimp <unfixed>
+ - gimp <unfixed> (bug #1150339)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2547446
NOTE: https://gitlab.gnome.org/GNOME/gimp/-/work_items/16801
CVE-2026-106059 (GitAhead through 2.7.1 on macOS contains a command injection
vulnerabi ...)
@@ -860,10 +860,10 @@ CVE-2025-64392 (This vulnerability in Veeam Backup
Enterprise Manager allows an
CVE-2025-64391 (This vulnerability in Veeam Agent for Microsoft Windows allows
a low-p ...)
NOT-FOR-US: Veeam
CVE-2026-92415 (\u2014 Use of Externally-Controlled Input to Select Classes or
Code vu ...)
- - jackrabbit <unfixed>
+ - jackrabbit <unfixed> (bug #1150343)
NOTE: https://www.openwall.com/lists/oss-security/2026/10/07/28
CVE-2026-92414 (: Session Fixation / Session Reuse across Users vulnerability
in Apach ...)
- - jackrabbit <unfixed>
+ - jackrabbit <unfixed> (bug #1150343)
NOTE: https://www.openwall.com/lists/oss-security/2026/10/07/27
CVE-2026-98374 (In the Linux kernel, the following vulnerability has been
resolved: t ...)
- linux 7.2.9-1
@@ -1660,7 +1660,7 @@ CVE-2026-67270 (Dell Container Storage Modules (CSM)
versions prior to 1.18.0, c
CVE-2026-67269 (Dell Container Storage Modules (CSM) Operator, versions prior
to 1.18. ...)
NOT-FOR-US: Dell / EMC
CVE-2026-66666 (Insertion of Sensitive Information Into Sent Data
vulnerability in Aut ...)
- - wordpress <unfixed>
+ - wordpress <unfixed> (bug #1150336)
NOTE:
https://wordpress.org/news/2026/10/wordpress-7-1-3-maintenance-and-security-release/
CVE-2026-66588 (Unauthenticated Broken Access Control in The7 <= 14.2.2
versions.)
NOT-FOR-US: WordPress plugin or theme
@@ -12739,42 +12739,42 @@ CVE-2026-94418 (Under WOLFSSL_SMALL_CERT_VERIFY,
ProcessPeerCertParse() runs the
NOTE: https://github.com/wolfSSL/wolfssl/pull/11500 (v5.9.4-stable)
NOTE: WOLFSSL_SMALL_CERT_VERIFY not built
CVE-2026-94417 (When an application enables both OCSP and CRL revocation
checking on o ...)
- - wolfssl <unfixed>
+ - wolfssl <unfixed> (bug #1150338)
[trixie] - wolfssl <no-dsa> (Minor issue)
[bookworm] - wolfssl <end-of-life> (EOL in bookworm LTS)
NOTE: https://github.com/wolfSSL/wolfssl/pull/11500 (v5.9.4-stable)
CVE-2026-93304 (A (D)TLS 1.2 client can accept a ChangeCipherSpec message
before it ha ...)
- - wolfssl <unfixed>
+ - wolfssl <unfixed> (bug #1150338)
[trixie] - wolfssl <no-dsa> (Minor issue)
[bookworm] - wolfssl <end-of-life> (EOL in bookworm LTS)
NOTE: https://github.com/wolfSSL/wolfssl/pull/11458 (v5.9.4-stable)
CVE-2026-93302 (MatchTrustedPeer ignores the public key used, leading to
forged CA clo ...)
- - wolfssl <unfixed>
+ - wolfssl <unfixed> (bug #1150338)
[trixie] - wolfssl <no-dsa> (Minor issue)
[bookworm] - wolfssl <end-of-life> (EOL in bookworm LTS)
NOTE: Fixed by:
https://github.com/wolfSSL/wolfssl/commit/22bcd51d553eaac1de37bee91fdac80cc47961e1
(v5.9.4-stable)
CVE-2026-89136 (When using RPK (Raw Public Key), the client side of a TLS 1.2,
1.3 and ...)
- - wolfssl <unfixed>
+ - wolfssl <unfixed> (bug #1150338)
[trixie] - wolfssl <no-dsa> (Minor issue)
[bookworm] - wolfssl <not-affected> (RPK not in 5.5.4)
NOTE: https://github.com/wolfSSL/wolfssl/pull/11009 (v5.9.4-stable)
CVE-2026-89135 (A failed X509_verify_cert call permanently plants an
unverified attack ...)
- - wolfssl <unfixed>
+ - wolfssl <unfixed> (bug #1150338)
[trixie] - wolfssl <not-affected> (Vulnerable code not present, see
#1149565)
[bookworm] - wolfssl <not-affected> (no WOLFSSL_TEMP_CA path)
NOTE: https://github.com/wolfSSL/wolfssl/pull/11009 (v5.9.4-stable)
CVE-2026-89134 (A certificate with no dNSName SAN but another SAN type present
(e.g. r ...)
- - wolfssl <unfixed>
+ - wolfssl <unfixed> (bug #1150338)
[trixie] - wolfssl <no-dsa> (Minor issue)
[bookworm] - wolfssl <end-of-life> (EOL in bookworm LTS)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10837 (v5.9.4-stable)
CVE-2026-89133 (wolfSSL versions 5.9.2 and earlier contain a flaw in the X.509
certifi ...)
- - wolfssl <unfixed>
+ - wolfssl <unfixed> (bug #1150338)
[trixie] - wolfssl <no-dsa> (Minor issue)
[bookworm] - wolfssl <postponed> (Minor issue; upstream fix changes the
layout of the installed struct Signer)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10687 (v5.9.4-stable)
CVE-2026-89102 (In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side
impleme ...)
- - wolfssl <unfixed>
+ - wolfssl <unfixed> (bug #1150338)
[trixie] - wolfssl <no-dsa> (Minor issue)
[bookworm] - wolfssl <not-affected> (no status_request_v2 pending-CA
code in 5.5.4)
NOTE: https://github.com/wolfSSL/wolfssl/pull/11027 (v5.9.4-stable)
@@ -12795,7 +12795,7 @@ CVE-2026-88772 (Vulnerability in Citrix NetScaler ADC
and Citrix NetScaler Gatew
CVE-2026-88771 (Improper input validation vulnerability in Citrix NetScaler
ADC and Ci ...)
NOT-FOR-US: NetScaler
CVE-2026-15442 (In all builds that make use of (D)TLS, including default
builds, there ...)
- - wolfssl <unfixed>
+ - wolfssl <unfixed> (bug #1150338)
[trixie] - wolfssl <no-dsa> (Minor issue)
[bookworm] - wolfssl <end-of-life> (EOL in bookworm LTS)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10863 (v5.9.4-stable)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/550cadc464cc30359216e9dc87dcba9856229747
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/550cadc464cc30359216e9dc87dcba9856229747
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
