[Git][security-tracker-team/security-tracker][master] Process two new stunnel issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6e40b3c8 by Salvatore Bonaccorso at 2026-08-04T21:33:50+02:00
Process two new stunnel issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -19,9 +19,13 @@ CVE-2026-70370 (Koha's reports/catalogue_stats.pl builds dynamic SQL in sub calc
 CVE-2026-70369 (Koha's reports/acquisitions_stats.pl builds its per-cell statistics qu ...)
 	NOT-FOR-US: Koha Library Management System
 CVE-2026-70368 (A stack-based out-of-bounds read vulnerability exists in the "s_vlog"  ...)
-	TODO: check
+	- stunnel <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2462029
+	TODO: check, AI generated report, unclear status (upstream)
 CVE-2026-70367 (A Server-Side Request Forgery (SSRF) bypass vulnerability exists in \u ...)
-	TODO: check
+	- stunnel <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2462083
+	TODO: check, unclear upstream status, AI generated report
 CVE-2026-69704 (Atals-Livre contains a SQL injection vulnerability that allows attacke ...)
 	NOT-FOR-US: Atals-Livre
 CVE-2026-69703 (Atlas-Livre contains an improper access control vulnerability in the a ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6e40b3c810e2fe742a3b52de5e55d56873438f27

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6e40b3c810e2fe742a3b52de5e55d56873438f27
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260804/7e0fb522/attachment.htm>