Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
625aca6a by Moritz Muehlenhoff at 2026-10-27T21:13:07+01:00
bugnums
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2255,7 +2255,7 @@ CVE-2026-116538 (HtmlSanitizer before 9.2.1039 and 10.0
prereleases before 10.0.
CVE-2026-116516 (Mattermost versions <=11.9 11.1.9 11.5.8 11.10.7.0 fail to
validate Zo ...)
- mattermost-server <itp> (bug #823556)
CVE-2026-116497 (A NULL pointer dereference vulnerability was found in
gssproxy. When a ...)
- - gssproxy <unfixed>
+ - gssproxy <unfixed> (bug #1152316)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2560642
CVE-2026-116492 (Frappe CRM app before 1.89.1 contains a missing authorization
vulnerab ...)
NOT-FOR-US: Frappe
@@ -2735,7 +2735,7 @@ CVE-2026-99088 (In the Linux kernel, the following
vulnerability has been resolv
[trixie] - linux 6.12.113-1
NOTE:
https://git.kernel.org/linus/3c6a4b11330fe424557538a98fca9f0a4c5bf313 (7.3-rc7)
CVE-2026-107891
- - musl <unfixed>
+ - musl <unfixed> (bug #1152311)
NOTE: https://www.openwall.com/lists/musl/2026/10/21/1
NOTE:
https://git.musl-libc.org/cgit/musl/commit/?id=7813e9119eb5fe681b6750b8a033a0490bca0941
CVE-2026-116228 (A vulnerability was found in 777genius agent-teams-ai up to
2.17.10. T ...)
@@ -2747,7 +2747,7 @@ CVE-2026-116224 (A vulnerability has been found in fr0tt
benotes up to 2.8.1. Th
CVE-2026-116223 (A flaw has been found in icret EasyImage up to 2.8.7. The
impacted ele ...)
NOT-FOR-US: icret EasyImage
CVE-2026-116124 (A security vulnerability has been detected in GNOME libgsf up
to 1.14. ...)
- - libgsf <unfixed>
+ - libgsf <unfixed> (bug #1152315)
NOTE: Fixed by:
https://gitlab.gnome.org/GNOME/libgsf/-/commit/a8e25560b74f84c3f86df6ca0ac59195fa5af68a
(LIBGSF_1_14_60)
CVE-2026-116123 (A weakness has been identified in NocoDB up to 2026.07.0. The
affected ...)
NOT-FOR-US: NocoDB
@@ -11870,9 +11870,9 @@ CVE-2026-101296 (A missing critical step in
authentication vulnerability in Apac
NOTE:
https://github.com/apache/tomcat/commit/8fafc6f263311b7a0b7ce67477822175d1adf7ce
(10.1.61)
NOTE:
https://github.com/apache/tomcat/commit/42827afa4d073ac3d9f8b3cc81b857aa455bf1e6
(9.0.123)
CVE-2026-101201 (A malformed header in the binary file fed to
QBinaryJson::fromBinaryDa ...)
- - qt6-5compat <unfixed>
- - qtbase-opensource-src <unfixed>
- - qtbase-opensource-src-gles <unfixed>
+ - qt6-5compat <unfixed> (bug #1152312)
+ - qtbase-opensource-src <unfixed> (bug #1152313)
+ - qtbase-opensource-src-gles <unfixed> (bug #1152314)
NOTE:
https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-101201
NOTE:
https://github.com/qt/qt5compat/commit/721ed576391211ca53ecdaaecf6dd41df7bc962e
NOTE:
https://github.com/qt/qt5compat/commit/c0a495894d83a3c48055bd1e544f93147fc6ade1
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/625aca6a233ad06121f4f15838f1b656a2ab1722
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/625aca6a233ad06121f4f15838f1b656a2ab1722
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
