Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f050d9e2 by Salvatore Bonaccorso at 2026-10-09T22:23:07+02:00
Add CVE-2026-15340/lwip
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -286,7 +286,9 @@ CVE-2026-19570 (The LE Audio Broadcast Sink in
subsys/bluetooth/audio/bap_broadc
CVE-2026-19569 (dynamic_object_create() in kernel/userspace/userspace.c
computed the b ...)
NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-15340 (lwIP SMTP client does not check the size of inputs,
potentially allowi ...)
- TODO: check
+ - lwip <unfixed> (unimportant)
+ NOTE: Fixed by:
https://cgit.git.savannah.gnu.org/cgit/lwip.git/commit/?id=614420f82c8729d070e01464c0dddb3c9525c772
+ NOTE: src/apps/smtp code not built in Debian binary packages
CVE-2026-108160 (AstronRPA through 1.1.6 contains a download of code without
integrity ...)
NOT-FOR-US: AstronRPA
CVE-2026-108159 (AstronRPA through 1.1.6 contains a cross-site scripting
vulnerability ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f050d9e2e06bb97e08e812d17784c692d8174bdd
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f050d9e2e06bb97e08e812d17784c692d8174bdd
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
