Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
da7a2fe9 by Salvatore Bonaccorso at 2026-10-09T10:55:26+02:00
Add two krb5 issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -417,7 +417,10 @@ CVE-2026-107780 (Dromara Skyeye through commit
003549ae5615bd114ba5bb8ddf6a8e8ea
CVE-2026-107779 (Dromara Skyeye through commit
003549ae5615bd114ba5bb8ddf6a8e8ead97c321 ...)
TODO: check
CVE-2026-107778 (MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer
dereferen ...)
- TODO: check
+ - krb5 <unfixed>
+ NOTE: https://github.com/krb5/krb5/pull/1511
+ NOTE: Fixed by:
https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08
(master)
+ NOTE: Fixed by:
https://github.com/krb5/krb5/commit/62196e2b269159a5465f5b8d0ed7cf6f29c3282a
(krb5-1.22 branch)
CVE-2026-107738 (SumatraPDF is a multi-format reader for Windows. In 3.6.1 and
earlier, ...)
NOT-FOR-US: SumatraPDF
CVE-2026-107737 (SumatraPDF is a multi-format reader for Windows. In 3.6.1 and
earlier, ...)
@@ -471,7 +474,10 @@ CVE-2026-107714 (The Mechanize library is used for
automating interaction with w
CVE-2026-107709 (A path traversal vulnerability exists in Bower decompress-zip
through ...)
TODO: check
CVE-2026-107708 (MIT krb5 through 1.22.2 contains a NULL pointer dereference
vulnerabil ...)
- TODO: check
+ - krb5 <unfixed>
+ NOTE: https://github.com/krb5/krb5/pull/1510
+ NOTE: Fixed by:
https://github.com/krb5/krb5/commit/f6e2c397ceda6467ebbaab8ed66d4895c9f1d6a7
(master)
+ NOTE: Fixed by:
https://github.com/krb5/krb5/commit/a88a18cafa1040a0c4f9c8d08288fc98831ec86d
(krb5-1.22 branch)
CVE-2026-107707 (Intego Antivirus for Windows through 3.0.0.1 contains a link
following ...)
TODO: check
CVE-2026-107706 (Dolibarr ERP CRM before 24.0.2 contains an incorrect
authorization vul ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/da7a2fe9d058733c49ab4447c6ce5bbfb76c791c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/da7a2fe9d058733c49ab4447c6ce5bbfb76c791c
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
