Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
3bea54bf by Salvatore Bonaccorso at 2026-10-23T05:36:49+02:00
Add Debian bug references for various issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1098,16 +1098,16 @@ CVE-2024-5139 (The Authentication Endpoint accepts
user-supplied input without s
CVE-2024-4989 (The callback URL parameter in WSO2 API Manager fails to
validate user- ...)
NOT-FOR-US: WSO2
CVE-2026-102486 (Out-of-bounds read in NTS extension field parsing in NTPsec
ntpd 1.1.4 ...)
- - ntpsec <unfixed>
+ - ntpsec <unfixed> (bug #1151689)
NOTE: https://blog.ntpsec.org/2026/10/20/version-1.2.6.html
CVE-2026-102485 (Out-of-bounds read in the Motorola Oncore refclock driver in
NTPsec nt ...)
- - ntpsec <unfixed>
+ - ntpsec <unfixed> (bug #1151689)
NOTE: https://blog.ntpsec.org/2026/10/20/version-1.2.6.html
CVE-2026-102484 (Heap-based buffer overflow in the JJY refclock driver in
NTPsec ntpd b ...)
- - ntpsec <unfixed>
+ - ntpsec <unfixed> (bug #1151689)
NOTE: https://blog.ntpsec.org/2026/10/20/version-1.2.6.html
CVE-2026-102483 (Reachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a
remote atta ...)
- - ntpsec <unfixed>
+ - ntpsec <unfixed> (bug #1151689)
NOTE: https://blog.ntpsec.org/2026/10/20/version-1.2.6.html
CVE-2026-105482
- nodejs <unfixed>
@@ -1119,7 +1119,7 @@ CVE-2026-106069
- nodejs <unfixed>
NOTE:
https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#tls-certificate-hostname-bypass-when-the-host-loosely-resolves-to-an-ip-address-cve-2026-106069---high
CVE-2026-111497
- - brotli <unfixed>
+ - brotli <unfixed> (bug #1151685)
- nodejs <unfixed> (unimportant)
NOTE: nodejs uses system provided brotli library
NOTE:
https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high
@@ -2982,7 +2982,7 @@ CVE-2026-113866 (When setting up an account,
Thunderbird's Exchange AutoDiscover
- thunderbird 1:153.5.1esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-115/#CVE-2026-113866
CVE-2026-113776 (virtualenv is a tool for creating isolated virtual python
environments ...)
- - python-virtualenv <unfixed>
+ - python-virtualenv <unfixed> (bug #1151685)
NOTE:
https://github.com/pypa/virtualenv/security/advisories/GHSA-8rjx-v5ww-45pp
NOTE:
https://github.com/pypa/virtualenv/commit/602b26623a724827ff171bf11fef4ad186d01f74
(21.14.2)
CVE-2026-113744 (A security vulnerability has been detected in Tenda AC19
16.03.10.07. ...)
@@ -3002,7 +3002,7 @@ CVE-2026-113736 (A vulnerability has been found in D-Link
DHP-W610AV 1.02EUb03.
CVE-2026-113735 (A vulnerability was determined in D-Link DCS-6501LH 3.03.02.
Affected ...)
NOT-FOR-US: D-Link
CVE-2026-113732 (virtualenv is a tool for creating isolated virtual python
environments ...)
- - python-virtualenv <unfixed>
+ - python-virtualenv <unfixed> (bug #1151685)
NOTE:
https://github.com/pypa/virtualenv/security/advisories/GHSA-c947-3pg5-gm8q
NOTE: Fixed by:
https://github.com/pypa/virtualenv/commit/3bddeaf8d02c3ee7f576503efb082f8f494cfcab
(21.14.2)
CVE-2026-113731 (djust provides Phoenix LiveView-style reactive server-side
rendering f ...)
@@ -3018,70 +3018,70 @@ CVE-2026-113728 (Bulwark Webmail is a self-hosted
webmail client for Stalwart Ma
CVE-2026-113727 (OpenChoreo is a developer platform for Kubernetes. From 1.0.0
until 1. ...)
NOT-FOR-US: OpenChoreo
CVE-2026-113726 (virtualenv is a tool for creating isolated virtual python
environments ...)
- - python-virtualenv <unfixed>
+ - python-virtualenv <unfixed> (bug #1151685)
NOTE:
https://github.com/pypa/virtualenv/security/advisories/GHSA-5vjq-rrrf-7h2q
NOTE: Fixed by:
https://github.com/pypa/virtualenv/commit/5b915367da82bd024b2a0d28d2f98007034b4aa2
(21.14.4)
CVE-2026-113725 (virtualenv is a tool for creating isolated virtual python
environments ...)
- - python-virtualenv <unfixed>
+ - python-virtualenv <unfixed> (bug #1151685)
NOTE:
https://github.com/pypa/virtualenv/security/advisories/GHSA-vxj4-q4g9-crj7
NOTE: Fixed by:
https://github.com/pypa/virtualenv/commit/c3104e02474b652832a9bbaae79f6e1696296932
(21.14.7)
CVE-2026-113724 (virtualenv is a tool for creating isolated virtual python
environments ...)
- - python-virtualenv <unfixed>
+ - python-virtualenv <unfixed> (bug #1151685)
NOTE:
https://github.com/pypa/virtualenv/security/advisories/GHSA-43mp-35q3-x3fq
NOTE: https://github.com/pypa/virtualenv/pull/3427
NOTE: Fixed by:
https://github.com/pypa/virtualenv/commit/2bfdc0230d1b2685fedfcfe66c835b9a2ec7c440
(21.14.9)
CVE-2026-113723 (virtualenv is a tool for creating isolated virtual python
environments ...)
- - python-virtualenv <unfixed>
+ - python-virtualenv <unfixed> (bug #1151685)
NOTE:
https://github.com/pypa/virtualenv/security/advisories/GHSA-6w3r-xr62-4xcp
NOTE: https://github.com/pypa/virtualenv/pull/3418
NOTE: Fixed by:
https://github.com/pypa/virtualenv/commit/5f48d711731311428aebfae61d46957762155b22
(21.14.9)
CVE-2026-113722 (virtualenv is a tool for creating isolated virtual python
environments ...)
- - python-virtualenv <unfixed>
+ - python-virtualenv <unfixed> (bug #1151685)
NOTE:
https://github.com/pypa/virtualenv/security/advisories/GHSA-c978-59m8-c77v
NOTE: https://github.com/pypa/virtualenv/pull/3417
NOTE: Fixed by:
https://github.com/pypa/virtualenv/commit/2519941bed33ee0d3ac99277f67913e439e476a9
(21.14.9)
CVE-2026-113721 (virtualenv is a tool for creating isolated virtual python
environments ...)
- - python-virtualenv <unfixed>
+ - python-virtualenv <unfixed> (bug #1151685)
NOTE:
https://github.com/pypa/virtualenv/security/advisories/GHSA-558c-9hv2-4prj
NOTE: https://github.com/pypa/virtualenv/pull/3431
NOTE: Fixed by:
https://github.com/pypa/virtualenv/commit/d25f28699eefb1fc34a251e5adf2b5de844c36cd
(21.14.9)
CVE-2026-113720 (virtualenv is a tool for creating isolated virtual python
environments ...)
- - python-virtualenv <unfixed>
+ - python-virtualenv <unfixed> (bug #1151685)
NOTE:
https://github.com/pypa/virtualenv/security/advisories/GHSA-fc2g-4w5p-6whm
NOTE: https://github.com/pypa/virtualenv/pull/3425
NOTE: Fixed by:
https://github.com/pypa/virtualenv/commit/35f0b33562790176dd186d0a3c517af3acc7a0e1
(21.14.9)
CVE-2026-113719 (virtualenv is a tool for creating isolated virtual python
environments ...)
- - python-virtualenv <unfixed>
+ - python-virtualenv <unfixed> (bug #1151685)
NOTE:
https://github.com/pypa/virtualenv/security/advisories/GHSA-hhxq-47xx-j5xx
NOTE: https://github.com/pypa/virtualenv/pull/3428
NOTE: Fixed by:
https://github.com/pypa/virtualenv/commit/e3cea6fa10a50fa29cf1fdddd772458fba076d5f
(21.14.9)
CVE-2026-113718 (virtualenv is a tool for creating isolated virtual python
environments ...)
- - python-virtualenv <unfixed>
+ - python-virtualenv <unfixed> (bug #1151685)
NOTE:
https://github.com/pypa/virtualenv/security/advisories/GHSA-394h-qwmc-48pf
NOTE: https://github.com/pypa/virtualenv/pull/3432
NOTE: Fixed by:
https://github.com/pypa/virtualenv/commit/e5fc2e6e189a877ff559af288919e3525d13e5e0
(21.14.9)
CVE-2026-113717 (virtualenv is a tool for creating isolated virtual python
environments ...)
- - python-virtualenv <unfixed>
+ - python-virtualenv <unfixed> (bug #1151685)
NOTE:
https://github.com/pypa/virtualenv/security/advisories/GHSA-cx28-75q4-x26q
NOTE: https://github.com/pypa/virtualenv/pull/3430
NOTE: Fixed by:
https://github.com/pypa/virtualenv/commit/7babec66e043e1cc8bc66869a063653898719d96
(21.14.9)
CVE-2026-113716 (virtualenv is a tool for creating isolated virtual python
environments ...)
- - python-virtualenv <unfixed>
+ - python-virtualenv <unfixed> (bug #1151685)
NOTE:
https://github.com/pypa/virtualenv/security/advisories/GHSA-cw65-gx24-rc82
NOTE: https://github.com/pypa/virtualenv/pull/3429
NOTE: Fixed by:
https://github.com/pypa/virtualenv/commit/554d9f9d4f7758f5cf53f993031e29787f1f74c5
(21.14.9)
CVE-2026-113715 (virtualenv is a tool for creating isolated virtual python
environments ...)
- - python-virtualenv <unfixed>
+ - python-virtualenv <unfixed> (bug #1151685)
NOTE:
https://github.com/pypa/virtualenv/security/advisories/GHSA-qmx5-4p3x-wvqf
NOTE: https://github.com/pypa/virtualenv/pull/3426
NOTE: Fixed by:
https://github.com/pypa/virtualenv/commit/b0008a58885ded9227faf8f910c6c402712c750a
(21.14.9)
CVE-2026-113714 (virtualenv is a tool for creating isolated virtual python
environments ...)
- - python-virtualenv <unfixed>
+ - python-virtualenv <unfixed> (bug #1151685)
NOTE:
https://github.com/pypa/virtualenv/security/advisories/GHSA-494p-63j8-28p3
NOTE: https://github.com/pypa/virtualenv/pull/3430
NOTE: Fixed by:
https://github.com/pypa/virtualenv/commit/7babec66e043e1cc8bc66869a063653898719d96
(21.14.9)
CVE-2026-113713 (virtualenv is a tool for creating isolated virtual python
environments ...)
- - python-virtualenv <unfixed>
+ - python-virtualenv <unfixed> (bug #1151685)
NOTE:
https://github.com/pypa/virtualenv/security/advisories/GHSA-4f8h-vr72-p32c
NOTE: https://github.com/pypa/virtualenv/pull/3437
NOTE: Fixed by:
https://github.com/pypa/virtualenv/commit/b81995c3feab9e1edb453c75ffc6616e1a77335e
(21.14.10)
@@ -5400,22 +5400,22 @@ CVE-2026-112943 (launch-editor allows users to open
files with line numbers in e
CVE-2026-112942 (launch-editor allows users to open files with line numbers in
editor f ...)
TODO: check
CVE-2026-112941 (filelock is a platform-independent file lock for Python. From
4.1.0 un ...)
- - python-filelock <unfixed>
+ - python-filelock <unfixed> (bug #1151686)
NOTE:
https://github.com/tox-dev/filelock/security/advisories/GHSA-wfhq-q4j2-c37m
NOTE: https://github.com/tox-dev/filelock/pull/842
NOTE: Fixed by:
https://github.com/tox-dev/filelock/commit/bfa066d65a1ba9106f86ee9d027f7588b9c77e03
(4.2.1)
CVE-2026-112940 (filelock is a platform-independent file lock for Python. From
3.20.4 u ...)
- - python-filelock <unfixed>
+ - python-filelock <unfixed> (bug #1151686)
NOTE:
https://github.com/tox-dev/filelock/security/advisories/GHSA-v4x8-3wr5-3wq8
NOTE: https://github.com/tox-dev/filelock/pull/834
NOTE: Fixed by:
https://github.com/tox-dev/filelock/commit/5e3f2ec0c5fb17cb2635b60b2b68bc63ab81ca2d
(4.2.1)
CVE-2026-112939 (filelock is a platform-independent file lock for Python. From
3.22.0 u ...)
- - python-filelock <unfixed>
+ - python-filelock <unfixed> (bug #1151686)
NOTE:
https://github.com/tox-dev/filelock/security/advisories/GHSA-rfpc-qcw5-3pc4
NOTE: https://github.com/tox-dev/filelock/pull/836
NOTE: Fixed by:
https://github.com/tox-dev/filelock/commit/eeceaa846cbe4df72718d94c8371ca1ab8f5b3cc
(4.2.1)
CVE-2026-112937 (filelock is a platform-independent file lock for Python. From
4.1.0 un ...)
- - python-filelock <unfixed>
+ - python-filelock <unfixed> (bug #1151686)
NOTE:
https://github.com/tox-dev/filelock/security/advisories/GHSA-jqc4-5cvw-7w85
NOTE: https://github.com/tox-dev/filelock/pull/834
NOTE: Fixed by:
https://github.com/tox-dev/filelock/commit/5e3f2ec0c5fb17cb2635b60b2b68bc63ab81ca2d
(4.2.1)
@@ -5424,42 +5424,42 @@ CVE-2026-112936 (filelock is a platform-independent
file lock for Python. From 3
NOTE:
https://github.com/tox-dev/filelock/security/advisories/GHSA-j8f7-rjxc-mr56
NOTE: Fixed by:
https://github.com/tox-dev/filelock/commit/4d45e83caf7e31f9a12fb44526bdc07f70114f04
(4.0.9)
CVE-2026-112935 (filelock is a platform-independent file lock for Python. From
3.22.0 u ...)
- - python-filelock <unfixed>
+ - python-filelock <unfixed> (bug #1151686)
NOTE:
https://github.com/tox-dev/filelock/security/advisories/GHSA-fq56-3cx3-fjxp
NOTE: https://github.com/tox-dev/filelock/pull/843
NOTE: Fixed by:
https://github.com/tox-dev/filelock/commit/740ff666b62a88496c8d7394e4e6230605e4d62b
(4.2.1)
CVE-2026-112934 (filelock is a platform-independent file lock for Python. From
4.0.0 un ...)
- - python-filelock <unfixed>
+ - python-filelock <unfixed> (bug #1151686)
NOTE:
https://github.com/tox-dev/filelock/security/advisories/GHSA-fj95-fr6c-h845
NOTE: https://github.com/tox-dev/filelock/pull/842
NOTE: Fixed by:
https://github.com/tox-dev/filelock/commit/bfa066d65a1ba9106f86ee9d027f7588b9c77e03
(4.2.1)
CVE-2026-112915 (filelock is a platform-independent file lock for Python. From
3.20.4 u ...)
- - python-filelock <unfixed>
+ - python-filelock <unfixed> (bug #1151686)
NOTE:
https://github.com/tox-dev/filelock/security/advisories/GHSA-cwqr-hh33-gh44
NOTE: https://github.com/tox-dev/filelock/pull/834
NOTE: Fixed by:
https://github.com/tox-dev/filelock/commit/5e3f2ec0c5fb17cb2635b60b2b68bc63ab81ca2d
(4.2.1)
CVE-2026-112914 (filelock is a platform-independent file lock for Python. From
4.1.0 un ...)
- - python-filelock <unfixed>
+ - python-filelock <unfixed> (bug #1151686)
NOTE:
https://github.com/tox-dev/filelock/security/advisories/GHSA-crv4-6mhj-j5jh
NOTE: https://github.com/tox-dev/filelock/pull/843
NOTE: Fixed by:
https://github.com/tox-dev/filelock/commit/740ff666b62a88496c8d7394e4e6230605e4d62b
(4.2.1)
CVE-2026-112912 (filelock is a platform-independent file lock for Python. From
3.32.6 u ...)
- - python-filelock <unfixed>
+ - python-filelock <unfixed> (bug #1151686)
NOTE:
https://github.com/tox-dev/filelock/security/advisories/GHSA-9j6q-wvj5-jgjg
NOTE: https://github.com/tox-dev/filelock/pull/835
NOTE: Fixed by:
https://github.com/tox-dev/filelock/commit/e1e825b1992f69fb6b346dc395d5ae4893536c0a
(4.2.1)
CVE-2026-112911 (filelock is a platform-independent file lock for Python. From
3.30.0 u ...)
- - python-filelock <unfixed>
+ - python-filelock <unfixed> (bug #1151686)
NOTE:
https://github.com/tox-dev/filelock/security/advisories/GHSA-9c4x-gm8v-wgc4
NOTE: https://github.com/tox-dev/filelock/pull/839
NOTE: Fixed by:
https://github.com/tox-dev/filelock/commit/bfa066d65a1ba9106f86ee9d027f7588b9c77e03
(4.2.1)
CVE-2026-112909 (filelock is a platform-independent file lock for Python.
Prior to 4.2. ...)
- - python-filelock <unfixed>
+ - python-filelock <unfixed> (bug #1151686)
NOTE:
https://github.com/tox-dev/filelock/security/advisories/GHSA-69hj-f68j-2879
NOTE: https://github.com/tox-dev/filelock/pull/835
NOTE: Fixed by:
https://github.com/tox-dev/filelock/commit/e1e825b1992f69fb6b346dc395d5ae4893536c0a
(4.2.1)
CVE-2026-112906 (filelock is a platform-independent file lock for Python. From
4.1.0 un ...)
- - python-filelock <unfixed>
+ - python-filelock <unfixed> (bug #1151686)
NOTE:
https://github.com/tox-dev/filelock/security/advisories/GHSA-2g95-wg33-c5x2
NOTE: Fixed by:
https://github.com/tox-dev/filelock/commit/740ff666b62a88496c8d7394e4e6230605e4d62b
(4.2.1)
CVE-2026-112861 (Authorization Bypass Through User-Controlled Key
vulnerability in xnau ...)
@@ -6777,15 +6777,15 @@ CVE-2026-111755 (follow-redirects is a Node.js HTTP and
HTTPS client wrapper tha
NOTE:
https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-8r9p-f939-6h3c
NOTE: Fixed by:
https://github.com/follow-redirects/follow-redirects/commit/080a76d0e125b37bf81717368a61d5dc37aa56c8
(v1.16.1)
CVE-2026-111750 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
- - python-aiohttp <unfixed>
+ - python-aiohttp <unfixed> (bug #1151687)
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-pqxq-w44r-73xw
NOTE: Fixed by:
https://github.com/aio-libs/aiohttp/commit/9b27347e61454d9f8ca2055f4c67a37dee336e83
(v3.14.4)
CVE-2026-111749 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
- - python-aiohttp <unfixed>
+ - python-aiohttp <unfixed> (bug #1151687)
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-gx76-c99x-2c96
NOTE: Fixed by:
https://github.com/aio-libs/aiohttp/commit/6a07c171ef9f3be583e2907dcd1931372efca8d6
(v3.14.4)
CVE-2026-111748 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
- - python-aiohttp <unfixed>
+ - python-aiohttp <unfixed> (bug #1151687)
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-f9xw-jh8m-3mwq
NOTE: Fixed by:
https://github.com/aio-libs/aiohttp/commit/6d4e7b01f9b951aa084a75d7356e907d4ee80411
(v3.14.4)
CVE-2026-111439 (\u5728 openGauss-server\u7684
src/common/backend/utils/adt/genfile.cpp ...)
@@ -6805,19 +6805,19 @@ CVE-2026-111406 (Unrestricted Upload of File with
Dangerous Type vulnerability i
CVE-2026-111398 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-111066 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
- - python-aiohttp <unfixed>
+ - python-aiohttp <unfixed> (bug #1151687)
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-9xw5-w5jj-pvcg
NOTE: Fixed by:
https://github.com/aio-libs/aiohttp/commit/2d94633b7f1b4c1ba07d647b629a8440652b2d09
(v3.14.4)
CVE-2026-111065 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
- - python-aiohttp <unfixed>
+ - python-aiohttp <unfixed> (bug #1151687)
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6cjc-53gc-5rqm
NOTE: Fixed by:
https://github.com/aio-libs/aiohttp/commit/9dd8eaf4e31f1237ef2c1574a8c82a739fca5805
(v3.14.4)
CVE-2026-111064 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
- - python-aiohttp <unfixed>
+ - python-aiohttp <unfixed> (bug #1151687)
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-5wr8-gcqf-gqf3
NOTE: Fixed by:
https://github.com/aio-libs/aiohttp/commit/be846822b4b3a5a54b6163e794b42dc06fba54a3
(v3.14.4)
CVE-2026-111063 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
- - python-aiohttp <unfixed>
+ - python-aiohttp <unfixed> (bug #1151687)
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-494j-54xm-rwp3
NOTE: Fixed by:
https://github.com/aio-libs/aiohttp/commit/999c356d61e966faffa97b06ab0d0455226d36c5
(v3.14.4)
CVE-2026-111061 (russh is a Rust SSH client and server library that includes
an SSH age ...)
@@ -12092,7 +12092,7 @@ CVE-2026-97205 (NGINX Plus and NGINX Open Source have a
vulnerability in the ngx
CVE-2026-96615 (Description NGINX Gateway Fabric has a vulnerability when it
is config ...)
NOT-FOR-US: F5
CVE-2026-96596 (Loop with Unreachable Exit Condition ('Infinite Loop')
vulnerability i ...)
- - erlang <unfixed>
+ - erlang <unfixed> (bug #1151684)
[trixie] - erlang <not-affected> (Vulnerable code not present)
[bookworm] - erlang <not-affected> (Vulnerable code not present)
- rebar3 <not-affected> (Vulnerable code not present)
@@ -12116,7 +12116,7 @@ CVE-2026-95101 (Description NGINX Plus and NGINX Open
Source have a vulnerabilit
CVE-2026-94348 (Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0,
contains an I ...)
NOT-FOR-US: Dell / EMC
CVE-2026-94200 (Improper Validation of Consistency within Input vulnerability
in Erlan ...)
- - erlang <unfixed>
+ - erlang <unfixed> (bug #1151684)
NOTE:
https://github.com/erlang/otp/security/advisories/GHSA-m5mh-q53w-67jq
NOTE: https://cna.erlef.org/cves/CVE-2026-94200.html
NOTE: https://osv.dev/vulnerability/EEF-CVE-2026-94200
@@ -12847,7 +12847,7 @@ CVE-2026-105874 (Improper Neutralization of Input
During Web Page Generation ('C
CVE-2026-105659 (Uncontrolled Resource Consumption vulnerability in mtrudel
bandit allo ...)
NOT-FOR-US: Bandit (mtrudel/bandit, not the same as src:bandit)
CVE-2026-105236 (Improper Certificate Validation vulnerability in the ssl
application i ...)
- - erlang <unfixed>
+ - erlang <unfixed> (bug #1151684)
NOTE:
https://github.com/erlang/otp/security/advisories/GHSA-2g23-cgjh-34gq
NOTE: https://cna.erlef.org/cves/CVE-2026-105236.html
NOTE: https://osv.dev/vulnerability/EEF-CVE-2026-105236
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3bea54bff9145eeb240d478de1d14dabd9d558a7
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3bea54bff9145eeb240d478de1d14dabd9d558a7
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
