Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d8d480ce by Salvatore Bonaccorso at 2026-11-05T17:55:22+01:00
Add new spip issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -121980,6 +121980,9 @@ CVE-2026-6368 (Calling wordexp with WRDE_APPEND in
the GNU C Library version 2.0
NOTE:
https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0014
CVE-2026-66915 (Joomla Extension - fabrikar.com - Remote code execution in
Fabrik < 4. ...)
NOT-FOR-US: Joomla
+CVE-2026-XXXX [RCE fixed in 4.4.30]
+ - spip 4.4.30+dfsg-1
+ NOTE:
https://blog.spip.net/Mise-a-jour-corrective-sortie-de-SPIP-4-4-30-955.html
CVE-2026-122032 (SPIP before 4.4.29 contains a SQL injection vulnerability
that allows ...)
- spip 4.4.29+dfsg-1
NOTE:
https://blog.spip.net/Mise-a-jour-critique-de-securite-sortie-de-SPIP-4-4-29.html
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d8d480ce3efc74b52e0b7e4af1f2ac9f230b9cbe
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d8d480ce3efc74b52e0b7e4af1f2ac9f230b9cbe
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits