Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f268a50b by Moritz Muehlenhoff at 2026-10-26T09:18:03+01:00
new QT issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -9069,7 +9069,12 @@ CVE-2026-101296 (A missing critical step in
authentication vulnerability in Apac
NOTE:
https://github.com/apache/tomcat/commit/8fafc6f263311b7a0b7ce67477822175d1adf7ce
(10.1.61)
NOTE:
https://github.com/apache/tomcat/commit/42827afa4d073ac3d9f8b3cc81b857aa455bf1e6
(9.0.123)
CVE-2026-101201 (A malformed header in the binary file fed to
QBinaryJson::fromBinaryDa ...)
- TODO: check
+ - qt6-5compat <unfixed>
+ - qtbase-opensource-src <unfixed>
+ - qtbase-opensource-src-gles <unfixed>
+ NOTE:
https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-101201
+ NOTE:
https://github.com/qt/qt5compat/commit/721ed576391211ca53ecdaaecf6dd41df7bc962e
+ NOTE:
https://github.com/qt/qt5compat/commit/c0a495894d83a3c48055bd1e544f93147fc6ade1
CVE-2026-100134 (Acrobat for Edge is affected by an out-of-bounds write
vulnerability t ...)
NOT-FOR-US: Adobe
CVE-2026-100132 (Acrobat for Edge is affected by an out-of-bounds read
vulnerability th ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f268a50bd3a365ac8be900f32b06c4be84be7f85
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f268a50bd3a365ac8be900f32b06c4be84be7f85
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
