Bastien Roucariès pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6889e829 by Bastien Roucariès at 2026-10-10T19:15:10+02:00
libmikmod/bookworm
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4643,14 +4643,17 @@ CVE-2026-105840 (lrzsz before 0.13.0 contains a path
traversal vulnerability in
CVE-2026-105839 (libmikmod before 3.3.14 contains an integer overflow in the
Oktalyzer ...)
- libmikmod 3.3.14-1
[trixie] - libmikmod <no-dsa> (Minor issue)
+ [bookworm] - libmikmod <postponed> (Minor issue)
NOTE: Fixed by:
https://github.com/sezero/mikmod/commit/097b69281fad6ba38a553569e6f55dbfdd71dc2a
(libmikmod-3.3.14)
CVE-2026-105838 (libmikmod before 3.3.14 contains a heap out-of-bounds read
vulnerabili ...)
- libmikmod 3.3.14-1
[trixie] - libmikmod <no-dsa> (Minor issue)
+ [bookworm] - libmikmod <postponed> (Minor issue)
NOTE: Fixed by:
https://github.com/sezero/mikmod/commit/e7c6c9e88fbe3e8af4668a2e116bb8de341383f8
(libmikmod-3.3.14)
CVE-2026-105837 (libmikmod before 3.3.14 contains an integer overflow
vulnerability in ...)
- libmikmod 3.3.14-1
[trixie] - libmikmod <no-dsa> (Minor issue)
+ [bookworm] - libmikmod <postponed> (Minor issue)
NOTE: Fixed by:
https://github.com/sezero/mikmod/commit/a125eabbd086f311496ae46d08aaebcad0a1c426
(libmikmod-3.3.14)
CVE-2026-105836 (QloApps through 1.7.0 contains an authorization bypass
vulnerability i ...)
NOT-FOR-US: QloApps
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6889e829f9c169667d9805e729f35fb7933fb808
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6889e829f9c169667d9805e729f35fb7933fb808
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
