Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
fc847ec8 by Salvatore Bonaccorso at 2026-10-09T11:22:03+02:00
Add two new keycloak issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -547,7 +547,7 @@ CVE-2026-107634 (Dislocker through 0.7.3 contains a heap
out-of-bounds read vuln
- dislocker <unfixed>
NOTE: Fixed by:
https://github.com/Aorimn/dislocker/commit/9158e9e41dd669b360cbc53cc18ccae729b67b48
CVE-2026-107623 (A flaw was found in the OIDC Dynamic Client Registration
(DCR) compone ...)
- TODO: check
+ - keycloak <itp> (bug #1088287)
CVE-2026-107615 (An uncontrolled search path element vulnerability in GlavSoft
TightVNC ...)
NOT-FOR-US: GlavSoft TightVNC Server for Windows
CVE-2026-107614 (An integer underflow in
WinCursorShapeUtils::trimTransparent() in Glav ...)
@@ -561,7 +561,7 @@ CVE-2026-107611 (An out-of-bounds read vulnerability in the
ZRLE decoder of Glav
CVE-2026-107608 (Improper link resolution before file access in the asset
bundling outp ...)
NOT-FOR-US: Amazon
CVE-2026-107604 (A flaw was found in the installation provider and client
registration ...)
- TODO: check
+ - keycloak <itp> (bug #1088287)
CVE-2026-107589 (Insufficient job validation for service accounts in Jacamar
CI prior t ...)
NOT-FOR-US: Jacamar CI
CVE-2026-107587 (Improper certificate validation in the webmail of Progressive
Robot hM ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc847ec8f5b1403dd2c698bfda95efbbff9e02cb
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc847ec8f5b1403dd2c698bfda95efbbff9e02cb
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
