Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
dee6cf4d by Salvatore Bonaccorso at 2026-10-13T09:31:05+02:00
Add two new containerd issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -23,9 +23,14 @@ CVE-2026-96119 (IBM i 7.3, 7.4, 7.5, and 7.6 could allow a
remote authenticated
CVE-2026-96012 (IBM Db2 Mirror for i 7.4, 7.5, and 7.6is vulnerable to
privilege escal ...)
NOT-FOR-US: IBM
CVE-2026-95838 (containerd is an open-source container runtime. Prior to
1.7.35, 2.0.1 ...)
- TODO: check
+ - containerd <unfixed>
+ NOTE:
https://github.com/containerd/containerd/security/advisories/GHSA-rp3h-jf77-q9p4
+ NOTE: Fixed by:
https://github.com/containerd/containerd/commit/e6ca378dcfa610d06589a3ac96aa992de866e4f0
CVE-2026-95837 (containerd is an open-source container runtime. From 2.1.0
until 2.2.7 ...)
- TODO: check
+ - containerd <unfixed>
+ NOTE:
https://github.com/containerd/containerd/security/advisories/GHSA-p7v4-vr35-mj6f
+ NOTE: https://github.com/containerd/containerd/pull/13913
+ NOTE: Fixed by:
https://github.com/containerd/containerd/commit/928c03c6898cad95f795300281fdff0dbc55a32f
CVE-2026-93892 (IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could
allow a rem ...)
NOT-FOR-US: IBM
CVE-2026-93891 (IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could
allow a rem ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dee6cf4d530ec911370a3dd446d8b95988c8b4ad
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dee6cf4d530ec911370a3dd446d8b95988c8b4ad
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
