Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
c7d814e6 by Salvatore Bonaccorso at 2026-10-30T06:19:51+01:00
Add Debian bug references for various issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
CVE-2026-115943
- - libspreadsheet-xlsx-perl <unfixed>
+ - libspreadsheet-xlsx-perl <unfixed> (bug #1152516)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44746764/
CVE-2026-XXXX [GHSA-5pgx-q9xx-j3qv]
- incus 7.0.2-3
@@ -79,115 +79,115 @@ CVE-2026-XXXX [GHSA-8mgx-h4v8-xqv2]
NOTE: https://github.com/lxc/incus/pull/4293
NOTE:
https://github.com/lxc/incus/security/advisories/GHSA-8mgx-h4v8-xqv2
CVE-2026-108270
- - request-tracker5 <unfixed>
+ - request-tracker5 <unfixed> (bug #1152514)
NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
TODO: check details from upstream and affected versions
CVE-2026-108279
- - request-tracker5 <unfixed>
+ - request-tracker5 <unfixed> (bug #1152514)
NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
TODO: check details from upstream and affected versions
CVE-2026-108278
- - request-tracker5 <unfixed>
+ - request-tracker5 <unfixed> (bug #1152514)
NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
TODO: check details from upstream and affected versions
CVE-2026-108275
- - request-tracker5 <unfixed>
+ - request-tracker5 <unfixed> (bug #1152514)
NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
TODO: check details from upstream and affected versions
CVE-2026-108353
- - request-tracker5 <unfixed>
+ - request-tracker5 <unfixed> (bug #1152514)
NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
TODO: check details from upstream and affected versions
CVE-2026-108363
- - request-tracker5 <unfixed>
+ - request-tracker5 <unfixed> (bug #1152514)
NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
TODO: check details from upstream and affected versions
CVE-2026-108271
- - request-tracker5 <unfixed>
+ - request-tracker5 <unfixed> (bug #1152514)
NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
TODO: check details from upstream and affected versions
CVE-2026-108272
- - request-tracker5 <unfixed>
+ - request-tracker5 <unfixed> (bug #1152514)
NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
TODO: check details from upstream and affected versions
CVE-2026-108273
- - request-tracker5 <unfixed>
+ - request-tracker5 <unfixed> (bug #1152514)
NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
TODO: check details from upstream and affected versions
CVE-2026-108276
- - request-tracker5 <unfixed>
+ - request-tracker5 <unfixed> (bug #1152514)
NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
TODO: check details from upstream and affected versions
CVE-2026-108277
- - request-tracker5 <unfixed>
+ - request-tracker5 <unfixed> (bug #1152514)
NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
TODO: check details from upstream and affected versions
CVE-2026-108280
- - request-tracker5 <unfixed>
+ - request-tracker5 <unfixed> (bug #1152514)
NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
TODO: check details from upstream and affected versions
CVE-2026-108347
- - request-tracker5 <unfixed>
+ - request-tracker5 <unfixed> (bug #1152514)
NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
TODO: check details from upstream and affected versions
CVE-2026-108365
- - request-tracker5 <unfixed>
+ - request-tracker5 <unfixed> (bug #1152514)
NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
TODO: check details from upstream and affected versions
CVE-2026-108371
- - request-tracker5 <unfixed>
+ - request-tracker5 <unfixed> (bug #1152514)
NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
TODO: check details from upstream and affected versions
CVE-2026-108343
- - request-tracker5 <unfixed>
+ - request-tracker5 <unfixed> (bug #1152514)
NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
TODO: check details from upstream and affected versions
CVE-2026-108344
- - request-tracker5 <unfixed>
+ - request-tracker5 <unfixed> (bug #1152514)
NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
TODO: check details from upstream and affected versions
CVE-2026-108346
- - request-tracker5 <unfixed>
+ - request-tracker5 <unfixed> (bug #1152514)
NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
TODO: check details from upstream and affected versions
CVE-2026-108351
- - request-tracker5 <unfixed>
+ - request-tracker5 <unfixed> (bug #1152514)
NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
TODO: check details from upstream and affected versions
CVE-2026-108349
- - request-tracker5 <unfixed>
+ - request-tracker5 <unfixed> (bug #1152514)
NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
TODO: check details from upstream and affected versions
CVE-2026-108352
- - request-tracker5 <unfixed>
+ - request-tracker5 <unfixed> (bug #1152514)
NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
TODO: check details from upstream and affected versions
CVE-2026-108350
- - request-tracker5 <unfixed>
+ - request-tracker5 <unfixed> (bug #1152514)
NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
TODO: check details from upstream and affected versions
CVE-2026-108348
- - request-tracker5 <unfixed>
+ - request-tracker5 <unfixed> (bug #1152514)
NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
TODO: check details from upstream and affected versions
CVE-2026-108274
- - request-tracker5 <unfixed>
+ - request-tracker5 <unfixed> (bug #1152514)
NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
TODO: check details from upstream and affected versions
CVE-2026-108282
- - request-tracker5 <unfixed>
+ - request-tracker5 <unfixed> (bug #1152514)
NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
TODO: check details from upstream and affected versions
CVE-2026-108342
- - request-tracker5 <unfixed>
+ - request-tracker5 <unfixed> (bug #1152514)
NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
TODO: check details from upstream and affected versions
CVE-2026-108281
- - request-tracker5 <unfixed>
+ - request-tracker5 <unfixed> (bug #1152514)
NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
TODO: check details from upstream and affected versions
CVE-2026-105454
- - request-tracker5 <unfixed>
+ - request-tracker5 <unfixed> (bug #1152514)
NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
TODO: check details from upstream and affected versions
CVE-2026-9536 (A heap-based buffer overflow vulnerability exists in the
vtkWindBladeR ...)
@@ -11403,7 +11403,7 @@ CVE-2026-110353 (HAProxy 3.2 before 3.4.6 allows a
remote unauthenticated attack
NOTE:
https://git.haproxy.org/?p=haproxy-3.0.git;a=commit;h=e1672c9ca04c81b544a60e316eb2bb4af02381e1
(v3.0.30)
NOTE:
https://git.haproxy.org/?p=haproxy-2.6.git;a=commit;h=f07a3dbd514ac585177792cca1ff0e5008f28b60
(v2.6.35)
CVE-2026-110264 (An issue has been discovered in GitLab CE/EE affecting all
versions fr ...)
- - ruby3.3 <unfixed>
+ - ruby3.3 <unfixed> (bug #1152513)
- ruby3.1 <removed>
NOTE: https://github.com/ruby/ruby/pull/16801
NOTE: Fixed by:
https://github.com/ruby/ruby/commit/493d26dcdea8b2f0ac5d28e057b401bc809e7fae
(v4.1.0-preview1)
@@ -24656,7 +24656,7 @@ CVE-2025-9373 (The PeproDev Branches Map plugin for
WordPress is vulnerable to S
CVE-2025-71433 (Kaneo before 2.1.6 contains a missing authorization
vulnerability that ...)
NOT-FOR-US: Kaneo
CVE-2024-58392 (PhysicsFS through 3.2.0 contains an out-of-bounds read
vulnerability i ...)
- - libphysfs <unfixed> (unimportant)
+ - libphysfs <unfixed> (unimportant; bug #1152517)
NOTE:
https://github.com/icculus/physfs/commit/8a90802778f14dea9c086fb5436839181a3222d5
NOTE: https://github.com/icculus/physfs/issues/79
NOTE: https://github.com/icculus/physfs/pull/80
@@ -30261,7 +30261,7 @@ CVE-2026-9268 (GitLab has remediated an issue in GitLab
EE affecting all version
CVE-2026-97691 (Convex is an open-source reactive database for application
developers. ...)
NOT-FOR-US: Convex
CVE-2026-97229 (GitLab has remediated an issue in GitLab CE/EE affecting all
versions ...)
- - ruby3.3 <unfixed>
+ - ruby3.3 <unfixed> (bug #1152513)
- ruby3.1 <removed>
NOTE: https://github.com/ruby/ruby/pull/19020
NOTE: Fixed by:
https://github.com/ruby/ruby/commit/7cfe8dc82f9f1b3f9c37c78e362fcbdf3c0b84f4
(v4.1.0-preview1)
@@ -54114,7 +54114,7 @@ CVE-2026-93620 (Unauthenticated Broken Access Control
in PayPlus Payment Gateway
CVE-2026-93618 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-93577 (GitLab has remediated an issue in GitLab CE/EE affecting all
versions ...)
- - ruby3.3 <unfixed>
+ - ruby3.3 <unfixed> (bug #1152513)
- ruby3.1 <removed>
NOTE: https://github.com/ruby/ruby/pull/19020
NOTE: Fixed by:
https://github.com/ruby/ruby/commit/7cfe8dc82f9f1b3f9c37c78e362fcbdf3c0b84f4
(v4.1.0-preview1)
@@ -54257,7 +54257,7 @@ CVE-2026-90900 (Joomla Extension - joomshaper.com -
Missing CSRF Token Verificat
CVE-2026-90899 (Joomla Extension - joomshaper.com - Unauthenticated PII
Exposure via I ...)
NOT-FOR-US: Joomla
CVE-2026-89078 (GitLab has remediated an issue in GitLab CE/EE affecting all
versions ...)
- - ruby3.3 <unfixed>
+ - ruby3.3 <unfixed> (bug #1152513)
- ruby3.1 <removed>
NOTE: https://github.com/ruby/ruby/pull/13332
NOTE: Fixed by:
https://github.com/ruby/ruby/commit/35000ac2ed3a1829f8d193ffb23da0e44cc6fe5f
(v4.0.0-preview2)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c7d814e6bf5884433ca4610ef5eb9643017032e2
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c7d814e6bf5884433ca4610ef5eb9643017032e2
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
