Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0f22bdaa by Moritz Muehlenhoff at 2026-10-12T22:32:16+02:00
older nagios4 issue CVEfied
- - - - -
2 changed files:
- data/CVE/list
- data/DSA/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -59572,7 +59572,9 @@ CVE-2026-48549 (Nagios Core before 4.5.13 and Nagios XI
before 2026R1.5 contains
- nagios4 4.5.14+ds-1 (bug #1145888)
NOTE: Fixed by:
https://github.com/NagiosEnterprises/nagioscore/commit/02aba584656eb10c2ff83a696b166f4bc7dd1304
(nagios-4.5.13)
CVE-2026-48548 (Nagios Core before 4.5.12 contains a cross-site request
forgery vulner ...)
- - nagios4 4.5.12+ds-1
+ - nagios4 4.5.12+ds-1 (bug #1136340)
+ [trixie] - nagios4 4.4.6-4.1+deb13u1
+ [bookworm] - nagios4 4.4.6-4+deb12u1
NOTE: Fixed by:
https://github.com/NagiosEnterprises/nagioscore/commit/e5ed38e53a5d65721520c7c67be0746d63da28cb
(nagios-4.5.12)
CVE-2026-47841 (An application using Spring Security's WebAuthn support may be
vulnera ...)
- libspring-security-2.0-java <removed>
@@ -150634,11 +150636,6 @@ CVE-2026-2651 (A vulnerability in MLflow versions
<=3.10.1.dev0 allows unauthori
NOT-FOR-US: mlflow
CVE-2026-25193 (Insertion of Sensitive Information into Log File (CWE-532)in
some Comm ...)
NOT-FOR-US: Gallagher
-CVE-2026-XXXX [CSRF Security Fix]
- - nagios4 4.5.12+ds-1 (bug #1136340)
- [trixie] - nagios4 4.4.6-4.1+deb13u1
- [bookworm] - nagios4 4.4.6-4+deb12u1
- NOTE: Fixed by:
https://github.com/NagiosEnterprises/nagioscore/commit/e5ed38e53a5d65721520c7c67be0746d63da28cb
(nagios-4.5.12)
CVE-2026-48832 (action/cookie.php in ecrire in SPIP before 4.4.15 is prone to
an open ...)
{DSA-6296-1}
- spip 4.4.15+dfsg-1
=====================================
data/DSA/list
=====================================
@@ -747,6 +747,7 @@
[bookworm] - exim4 4.96-15+deb12u10
[trixie] - exim4 4.98.2-1+deb13u3
[28 May 2026] DSA-6308-1 nagios4 - security update
+ {CVE-2026-48548}
[bookworm] - nagios4 4.4.6-4+deb12u1
[trixie] - nagios4 4.4.6-4.1+deb13u1
[28 May 2026] DSA-6307-1 kitty - security update
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0f22bdaa7d67ddaa0644595590598ca884415091
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0f22bdaa7d67ddaa0644595590598ca884415091
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
