Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b3a12f6f by Moritz Muehlenhoff at 2026-10-16T23:15:36+02:00
bugnums
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -59,7 +59,7 @@ CVE-2026-81452 (Dell Alienware Command Center (AWCC),
versions prior to 6.14.54.
CVE-2026-80092 (Authentication bypass by assumed-immutable data in Microsoft
Identity ...)
NOT-FOR-US: Microsoft
CVE-2026-77630 (pupnp is an SDK for development of UPnP device and control
point appli ...)
- - pupnp <unfixed>
+ - pupnp <unfixed> (bug #1151082)
NOTE:
https://github.com/pupnp/pupnp/security/advisories/GHSA-46ph-jff5-5h77
NOTE:
https://github.com/pupnp/pupnp/commit/5dba8070b4d64d976f8e6fc13f1f301befebe7d2
(release-22.0.4)
CVE-2026-77474 (destructive_command_guard (dcg) is a command-line safety tool
that blo ...)
@@ -89,15 +89,15 @@ CVE-2026-59967 (Tandoor Recipes is an application for
managing recipes, planning
CVE-2026-59962 (Tandoor Recipes is an application for managing recipes,
planning meals ...)
NOT-FOR-US: Tandoor Recipes
CVE-2026-57488 (pupnp is an SDK for development of UPnP device and control
point appli ...)
- - pupnp <unfixed>
+ - pupnp <unfixed> (bug #1151082)
NOTE:
https://github.com/pupnp/pupnp/security/advisories/GHSA-g6c2-x4r9-352g
NOTE:
https://github.com/pupnp/pupnp/commit/de9602aef34ff722f3630d66c9be8eaa0aa9f012
(release-2.0.2)
CVE-2026-57487 (pupnp is an SDK for development of UPnP device and control
point appli ...)
- - pupnp <unfixed>
+ - pupnp <unfixed> (bug #1151082)
NOTE:
https://github.com/pupnp/pupnp/security/advisories/GHSA-gcj7-j9f7-q84c
NOTE:
https://github.com/pupnp/pupnp/commit/9ff9bc583ad8ee4ba022634434a7b71db9bd96e1
(release-2.0.2)
CVE-2026-57486 (pupnp is an SDK for development of UPnP device and control
point appli ...)
- - pupnp <unfixed>
+ - pupnp <unfixed> (bug #1151082)
NOTE:
https://github.com/pupnp/pupnp/security/advisories/GHSA-q54q-vx78-v9rq
NOTE:
https://github.com/pupnp/pupnp/commit/4b2f775e3b98de3cfb096707bcde040c5562d9ec
(release-2.0.2)
CVE-2026-57447 (Discourse Doc Categories is a plugin for organizing Discourse
topics a ...)
@@ -107,7 +107,7 @@ CVE-2026-57446 (libIEC61850 is an open-source
implementation of IEC 61850 client
CVE-2026-57169 (Dockhand is a Docker management application. Prior to 1.0.34,
the in-b ...)
TODO: check
CVE-2026-55862 (pupnp is an SDK for development of UPnP device and control
point appli ...)
- - pupnp <unfixed>
+ - pupnp <unfixed> (bug #1151082)
NOTE:
https://github.com/pupnp/pupnp/security/advisories/GHSA-25cx-xv8x-j247
NOTE:
https://github.com/pupnp/pupnp/commit/82ccaec7ab6b1258ea1ac66374d8940712ccd4c4
(release-2.0.0)
CVE-2026-55836 (Open Zaak is an open-source data and services layer for Dutch
case-ori ...)
@@ -1119,7 +1119,7 @@ CVE-2026-8145 (The WholesaleX \u2013 B2B & Wholesale
Plugin for WooCommerce with
CVE-2026-88794 (Enterprise Architect is vulnerable to XML External Entity
(XXE) inject ...)
NOT-FOR-US: Enterprise Architect
CVE-2026-88753 (A Regular-Expression Denial of Service (ReDoS) in the
Markdown2. extra ...)
- - python-markdown2 <unfixed>
+ - python-markdown2 <unfixed> (bug #1151085)
NOTE: https://gist.github.com/NanaSec/354b4188bbd7f4105008c7b8be49b0ba
CVE-2026-87029 (undici is an HTTP client library for Node.js. In versions
7.15.0 throu ...)
- node-undici 8.12.2+dfsg+~cs3.2.3-1
@@ -2117,7 +2117,7 @@ CVE-2026-110841 (n8n before 2.41.4 and 2.42.0 contains an
authorization bypass i
CVE-2026-110840 (n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL
injection v ...)
NOT-FOR-US: n8n
CVE-2026-110816 (### Summary `qs.stringify` with `arrayFormat: 'comma'`
throws `Type ...)
- - node-qs <unfixed>
+ - node-qs <unfixed> (bug #1151084)
NOTE:
https://github.com/ljharb/qs/security/advisories/GHSA-6pq8-jhm2-2vcw
NOTE:
https://github.com/ljharb/qs/commit/a952e7519338ef0cfb25694a2988848f93333727
(v6.16.1)
CVE-2026-110810 (A vulnerability was detected in ggml-org whisper.cpp up to
1.9.4. This ...)
@@ -2827,7 +2827,7 @@ CVE-2026-110604 (Mini-XML 4.0.0 through 4.0.6 contains an
off-by-one stack out-o
CVE-2026-110603 (LASzip through 3.5.0 contains an invalid free vulnerability
in laszip_ ...)
TODO: check
CVE-2026-110602 (libmspack through 0.11alpha contains an uninitialized pointer
free vul ...)
- - libmspack <unfixed>
+ - libmspack <unfixed> (bug #1151083)
NOTE:
https://github.com/kyz/libmspack/commit/4d868504114346aa767d435fbb89a8b76603493f
CVE-2026-110601 (libsixel before 1.8.7-r1 and 1.9.0 through 1.10.5 contains a
heap out- ...)
TODO: check
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b3a12f6f222279030a70ea6d5444610d035d83c0
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b3a12f6f222279030a70ea6d5444610d035d83c0
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
