[Git][security-tracker-team/security-tracker][master] Add new open62541 issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Aug 6 09:38:00 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
aab97c25 by Salvatore Bonaccorso at 2026-08-06T10:37:43+02:00
Add new open62541 issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -165,9 +165,11 @@ CVE-2026-67872 (An issue in Systerel S2OPC 1.7.3 allows a remote attacker to cau
 CVE-2026-67871 (Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote  ...)
 	NOT-FOR-US: Systerel S2OPC
 CVE-2026-67870 (In open62541 v1.5.5, the server-side AddReferences implementation cont ...)
-	TODO: check
+	- open62541 <unfixed>
+	NOTE: https://github.com/open62541/open62541/issues/8172
 CVE-2026-67869 (Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote atta ...)
-	TODO: check
+	- open62541 <unfixed>
+	NOTE: https://github.com/open62541/open62541/issues/8171
 CVE-2026-67867 (Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote  ...)
 	NOT-FOR-US: Systerel S2OPC
 CVE-2026-67866 (Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote  ...)
@@ -175,9 +177,11 @@ CVE-2026-67866 (Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a r
 CVE-2026-67865 (S2OPC 1.7.3 contains an out-of-bounds read in RepublishResponse handli ...)
 	NOT-FOR-US: Systerel S2OPC
 CVE-2026-67864 (An issue in open62541 v.1.5.5 and before allows a remote attacker to c ...)
-	TODO: check
+	- open62541 <unfixed>
+	NOTE: https://github.com/open62541/open62541/issues/8133
 CVE-2026-67863 (In open62541 1.5.5, a server-side use-after-free exists in the local M ...)
-	TODO: check
+	- open62541 <unfixed>
+	NOTE: https://github.com/open62541/open62541/issues/8131
 CVE-2026-67531 (FrontMCP is a TypeScript-first framework for the Model Context Protoco ...)
 	NOT-FOR-US: FrontMCP
 CVE-2026-66885 (Cross-Site Request Forgery (CSRF) vulnerability in livebook-dev livebo ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/aab97c25445cbd7431693fdbd1490577e1e7984d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/aab97c25445cbd7431693fdbd1490577e1e7984d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260806/87de9a21/attachment.htm>


More information about the debian-security-tracker-commits mailing list