Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
7b767f20 by Salvatore Bonaccorso at 2026-10-24T09:55:15+02:00
Add Debian bug references for various issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -361,7 +361,7 @@ CVE-2026-114353 (Hidden functionality (undocumented
backdoor) in the root-privil
CVE-2026-113951 (If an attacker can write to the filesystem of a container k8s
cluster ...)
NOT-FOR-US: Apple
CVE-2026-113877 (HTTP::Headers::ActionPack versions before 0.10 for Perl allow
CPU exha ...)
- - libhttp-headers-actionpack-perl <unfixed>
+ - libhttp-headers-actionpack-perl <unfixed> (bug #1151877)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44584817/
NOTE: Fixed by:
https://github.com/robrwo/perl-HTTP-Headers-ActionPack/commit/77f0deb23f3de872c2e64befd72750e0f0f4bec9
(v0.10)
CVE-2026-113674 (The GeoDirectory WordPress plugin before 2.8.194 does not
correctly v ...)
@@ -8294,17 +8294,17 @@ CVE-2026-111090 (A logic error exists in the signature
verification routine resu
CVE-2026-111088 (A Stored Cross-Site Scripting vulnerability exists in the SNS
VPN log ...)
NOT-FOR-US: SNS
CVE-2026-110725 (fast-uri is a dependency-free RFC 3986 URI parser and
serializer for N ...)
- - node-ajv <unfixed>
+ - node-ajv <unfixed> (bug #1151875)
[trixie] - node-ajv <no-dsa> (Minor issue)
NOTE: Embedded fast-uri used and provided as node-fast-uri, starting
with forky
NOTE:
https://github.com/fastify/fast-uri/security/advisories/GHSA-333x-w4r6-6crp
CVE-2026-110306 (fast-uri is a dependency-free RFC 3986 URI parser and
serializer for N ...)
- - node-ajv <unfixed>
+ - node-ajv <unfixed> (bug #1151875)
[trixie] - node-ajv <no-dsa> (Minor issue)
NOTE: Embedded fast-uri used and provided as node-fast-uri, starting
with forky
NOTE:
https://github.com/fastify/fast-uri/security/advisories/GHSA-w74x-v6f9-j3xg
CVE-2026-110180 (fast-uri is a dependency-free RFC 3986 URI parser and
serializer for N ...)
- - node-ajv <unfixed>
+ - node-ajv <unfixed> (bug #1151875)
[trixie] - node-ajv <no-dsa> (Minor issue)
NOTE: Embedded fast-uri used and provided as node-fast-uri, starting
with forky
NOTE:
https://github.com/fastify/fast-uri/security/advisories/GHSA-wjr9-j795-jxcr
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7b767f2063281a8afc8fde70d1aaf0829b61dd85
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7b767f2063281a8afc8fde70d1aaf0829b61dd85
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
