Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ab57720a by Salvatore Bonaccorso at 2026-10-09T10:30:34+02:00
Update status for Backdrop CMS CVEs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -368,7 +368,7 @@ CVE-2026-11318 (Deskin through 3.3.4.3 contains a privilege
escalation vulnerabi
CVE-2026-10631 (An authorization bypass in the EWS FindItem handler of Zimbra
Collabor ...)
NOT-FOR-US: Zimbra
CVE-2026-107914 (Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1
doesn't suffici ...)
- TODO: check
+ - backdrop <itp> (bug #914257)
CVE-2026-107911 (A type confusion vulnerability in the _read_flags function
(src/comman ...)
NOT-FOR-US: FalkorDB
CVE-2026-107910 (An improper authentication vulnerability in the
is_authenticated funct ...)
@@ -286502,7 +286502,7 @@ CVE-2025-48922 (Improper Neutralization of Input
During Web Page Generation ('Cr
CVE-2025-48921 (Cross-Site Request Forgery (CSRF) vulnerability in Drupal Open
Social ...)
NOT-FOR-US: Drupal core and addons
CVE-2025-44141 (A Cross-Site Scripting (XSS) vulnerability exists in the node
creation ...)
- NOT-FOR-US: Backdrop CMS
+ - backdrop <itp> (bug #914257)
CVE-2025-3773 (A sensitive information exposure vulnerability in System
Information ...)
NOT-FOR-US: Trellix
CVE-2025-3771 (A path or symbolic link manipulation vulnerability in SIR 1.0.3
and pr ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ab57720adff5e22fc061e886e51858b9df59b079
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ab57720adff5e22fc061e886e51858b9df59b079
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
