Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b6414dcd by Salvatore Bonaccorso at 2026-10-09T19:24:19+02:00
Add CVE-2026-61801/golang-github-moby-sys
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -197,7 +197,11 @@ CVE-2026-62128 (Missing Authorization vulnerability in
Creator LMS Creator LMS c
CVE-2026-62127 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-61801 (The `github.com/moby/sys/user` package provides Go utilities
for parsi ...)
- TODO: check
+ - golang-github-moby-sys <unfixed>
+ NOTE:
https://github.com/moby/sys/security/advisories/GHSA-mjcv-p78q-w5fw
+ NOTE: https://github.com/moby/sys/pull/221
+ NOTE: Fixed by:
https://github.com/moby/sys/commit/2c56c3d5d089bfa66d01b6c0bb69428e9d5d18c5
(user/v0.4.1)
+ NOTE: Fixed by:
https://github.com/moby/sys/commit/bba2f13154cb607bfbc7e209f8d9100ef4000329
(user/v0.4.1)
CVE-2026-5759 (A double free and use-after-free vulnerability in the
RdbLoadDeletedNo ...)
NOT-FOR-US: FalkorDB
CVE-2026-50055 (A policy-enforcement flaw in Zimbra Collaboration Suite allows
an auth ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b6414dcdda1724fafb4c77d9bea98451748c16ff
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b6414dcdda1724fafb4c77d9bea98451748c16ff
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
