Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
fe278728 by Salvatore Bonaccorso at 2026-10-21T08:57:31+02:00
Process two NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -11,7 +11,7 @@ CVE-2026-113812
NOTE: Debian's libmozilla-ca-perl is patched to use the system
ca-certificates
NOTE: provided certificates.
CVE-2026-9589 (Missing authorization in the configuration cascade operations
of the C ...)
- TODO: check
+ NOT-FOR-US: Unblu
CVE-2026-97406 (XERJ Console API bearer tokens can bypass the
passkey\u2011only authen ...)
TODO: check
CVE-2026-97400 (In Eclipse OpenJ9 versions up to 0.63, opening a supplied
diagnostic d ...)
@@ -97,7 +97,7 @@ CVE-2026-88041 (Incomplete cleanup vulnerability in Apache
Tomcat allowed an tra
CVE-2026-86471 (An unvalidated runtime configuration value in Apache CouchDB
3.5.2 and ...)
TODO: check
CVE-2026-85267 (A Cross-Site WebSocket Hijacking vulnerability in Cloud Shell
prior to ...)
- TODO: check
+ NOT-FOR-US: Google Cloud Platform
CVE-2026-80353 (Time-of-check time-of-use (TOCTOU) race condition
vulnerability in Apa ...)
- tomcat9 9.0.70-2
NOTE: Starting with 9.0.70-2 src:tomcat9 no longer ships the server
stack, using that as the fixed version
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fe278728d276efb2f00a07733356b0547e03d5d2
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fe278728d276efb2f00a07733356b0547e03d5d2
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
