Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
5fea9a99 by Salvatore Bonaccorso at 2026-10-30T23:26:09+01:00
Add Debian bug references for various issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -33,7 +33,7 @@ CVE-2026-86715 (Plaintext storage of a password vulnerability
in Crypttech Crypt
CVE-2026-85268 (A Cross-Site Scripting (XSS) (CWE-79) vulnerability in the
auth/handle ...)
NOT-FOR-US: Google Cloud
CVE-2026-84243 (The gettext family of functions in the GNU C Library version
2.0 and l ...)
- - glibc <unfixed>
+ - glibc <unfixed> (bug #1152640)
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=17142
NOTE:
https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0025
CVE-2026-82104 (In Teltonika Networks RUTOS devices running versions from 7.22
through ...)
@@ -927,12 +927,12 @@ CVE-2026-119283 (joserfc is a Python library that
provides an implementation of
CVE-2026-119282 (Nx is a monorepo solution for TypeScript and polyglot
codebases. From ...)
TODO: check
CVE-2026-119281 (MariaDB Connector/J is used to connect applications developed
in Java ...)
- - mariadb-connector-java <unfixed>
+ - mariadb-connector-java <unfixed> (bug #1152641)
NOTE:
https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-grfq-r75j-rw9x
NOTE: https://jira.mariadb.org/browse/CONJ-1379
NOTE: Fixed by:
https://github.com/mariadb-corporation/mariadb-connector-j/commit/af5e565eb171cfc66ea8e948ddc616abed0c4623
(3.5.11)
CVE-2026-119280 (MariaDB Connector/J is used to connect applications developed
in Java ...)
- - mariadb-connector-java <unfixed>
+ - mariadb-connector-java <unfixed> (bug #1152641)
NOTE:
https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-4jq2-8v3c-97w8
NOTE: https://jira.mariadb.org/browse/CONJ-1357
NOTE: Fixed by:
https://github.com/mariadb-corporation/mariadb-connector-j/commit/280efcfb4390055858fa2dd12b722d85a6a13ab8
(3.5.11)
@@ -948,12 +948,12 @@ CVE-2026-119278 (MariaDB Connector/J is used to connect
applications developed i
NOTE: Track first version in the 3.5.y series as the fixed version
TODO: check, details + correctness
CVE-2026-119277 (MariaDB Connector/J is used to connect applications developed
in Java ...)
- - mariadb-connector-java <unfixed>
+ - mariadb-connector-java <unfixed> (bug #1152641)
NOTE:
https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-wfxr-v78w-p49r
NOTE: https://jira.mariadb.org/browse/CONJ-1381
NOTE: Fixed by:
https://github.com/mariadb-corporation/mariadb-connector-j/commit/52538206298db39062ad67939f1446b767cacde4
(3.5.11)
CVE-2026-119276 (MariaDB Connector/J is used to connect applications developed
in Java ...)
- - mariadb-connector-java <unfixed>
+ - mariadb-connector-java <unfixed> (bug #1152641)
NOTE:
https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-h599-m3w5-9m7x
NOTE: Fixed by:
https://github.com/mariadb-corporation/mariadb-connector-j/commit/b9e1ee8d9b4d820d70719504cdfd5c97f1aede5f
(3.5.11)
CVE-2026-119272 (Out of bounds read in FileSystem in Google Chrome prior to
156.0.8078. ...)
@@ -985,7 +985,7 @@ CVE-2026-119261 (Improper input validation in Skia in
Google Chrome prior to 156
CVE-2026-119260 (Use after free in Frames in Google Chrome prior to
156.0.8078.79 allow ...)
- chromium <unfixed>
CVE-2026-119210 (MariaDB Connector/J is used to connect applications developed
in Java ...)
- - mariadb-connector-java <unfixed>
+ - mariadb-connector-java <unfixed> (bug #1152641)
NOTE:
https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-fhx5-2xqw-2cgm
NOTE: https://jira.mariadb.org/browse/CONJ-1387
NOTE: Fixed by:
https://github.com/mariadb-corporation/mariadb-connector-j/commit/a4891f877f1c885a573194771c1ed0aacec0ce1d
(3.5.11)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5fea9a994d36850baf5754bd8b9c9d8f02ad7ab4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5fea9a994d36850baf5754bd8b9c9d8f02ad7ab4
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
