Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
fc17d9f8 by Moritz Muehlenhoff at 2026-11-06T20:32:19+01:00
bugnums
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2250,7 +2250,7 @@ CVE-2026-121943 (Irontec sngrep through 1.9.0 contains an
out-of-bounds stack re
NOTE: https://github.com/irontec/sngrep/pull/591
NOTE: Fixed by:
https://github.com/irontec/sngrep/commit/d49c96c99bfff47b41c547113cb3a39dfb9b8717
CVE-2026-121942 (ZBar through 0.23.95 contains an out-of-bounds read
vulnerability in _ ...)
- - zbar <unfixed>
+ - zbar <unfixed> (bug #1153258)
[trixie] - zbar <no-dsa> (Minor issue)
NOTE: https://github.com/mchehab/zbar/issues/351
CVE-2026-121941 (libmt32emu before 2.8.4 contains a heap buffer overflow
vulnerability ...)
@@ -2395,13 +2395,13 @@ CVE-2026-110022 (The PFI plugin framework deploys
executable assemblies (DLLs) f
CVE-2026-110021 (PLCnext Engineer checks GSDX manifest reference digests but
does not c ...)
TODO: check
CVE-2026-108949 (Denial of Service via OOM vulnerability in Apache ActiveMQ,
ActiveMQ B ...)
- - activemq <unfixed>
+ - activemq <unfixed> (bug #1153259)
NOTE: https://lists.apache.org/thread/2l1jbc8j88w1n9bd44vm9bjtj9t3o80n
CVE-2026-108946 (Improper input validation vulnerability in Apache ActiveMQ,
Apache Act ...)
- - activemq <unfixed>
+ - activemq <unfixed> (bug #1153259)
NOTE: https://lists.apache.org/thread/0spj0m846vhw3cjyfmzsy3l8vxh6f5t6
CVE-2026-108500 (Input validation vulnerability in Apache ActiveMQ configured
to use th ...)
- - activemq <unfixed>
+ - activemq <unfixed> (bug #1153259)
NOTE: https://lists.apache.org/thread/0oh4k4ty6hv56d4sydjp26l95f4bsnxt
CVE-2026-107846 (bitcoinjs-lib is a JavaScript Bitcoin library for Node.js and
browsers ...)
NOT-FOR-US: bitcoinjs-lib
@@ -2840,12 +2840,12 @@ CVE-2026-63197 (traQ is a messenger application built
for Digital Creators Club
CVE-2026-62000 (Missing Authorization vulnerability in WC Lovers WCFM
Marketplace wc-m ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-61497 (TinyUSB before 0.20.1 contains an integer underflow
vulnerability in t ...)
- - tinyusb <unfixed>
+ - tinyusb <unfixed> (bug #1153260)
NOTE: Fixed by:
https://github.com/hathach/tinyusb/commit/85047e1777f5c20b7a936aa905c746125d3ed066
(0.21.0)
CVE-2026-61496
REJECTED
CVE-2026-61495 (TinyUSB through 0.21.0, fixed in commit e85c2b8, contains an
out-of-bo ...)
- - tinyusb <unfixed>
+ - tinyusb <unfixed> (bug #1153260)
NOTE: Fixed by:
https://github.com/hathach/tinyusb/commit/e85c2b8affa1efbf00d398d59e7a87d3e61cc4a9
CVE-2026-57154 (OPNsense is a FreeBSD based firewall and routing platform.
Prior to 26 ...)
NOT-FOR-US: FreeBSD
@@ -2934,7 +2934,7 @@ CVE-2026-121729 (emailflare before commit cf31f33
contains a missing authorizati
CVE-2026-121728 (SourceHut meta.sr.ht 0.56.11 before 0.89.0 contains an
authorization b ...)
TODO: check
CVE-2026-121727 (Kore before 4.3.0 contains an integer underflow vulnerability
in HTTP ...)
- - kore <unfixed>
+ - kore <unfixed> (bug #1153257)
[trixie] - kore <no-dsa> (Minor issue)
NOTE:
https://github.com/jorisvink/kore/commit/1ff3c0f6f7973dc7fc8bf38369790ef2d8079b3b
CVE-2026-121652 (Cross-site scripting (XSS) issue in AWS Amplify
maplibre-gl-js-amplify ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc17d9f8e1e1ec0b061108e0c209773ba25f21c4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc17d9f8e1e1ec0b061108e0c209773ba25f21c4
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
