[Git][security-tracker-team/security-tracker][master] Update status on two stunnel4 issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e8589e6b by Salvatore Bonaccorso at 2026-08-08T11:10:40+02:00
Update status on two stunnel4 issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2934,13 +2934,13 @@ CVE-2026-70370 (Koha's reports/catalogue_stats.pl builds dynamic SQL in sub calc
 CVE-2026-70369 (Koha's reports/acquisitions_stats.pl builds its per-cell statistics qu ...)
 	NOT-FOR-US: Koha Library Management System
 CVE-2026-70368 (A stack-based out-of-bounds read vulnerability exists in the "s_vlog"  ...)
-	- stunnel <unfixed>
+	- stunnel 3:5.80-1
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2462029
-	TODO: check, AI generated report, unclear status (upstream)
+	NOTE: https://www.stunnel.org/CVE-2026-70368.html
 CVE-2026-70367 (A Server-Side Request Forgery (SSRF) bypass vulnerability exists in \u ...)
-	- stunnel <unfixed>
+	- stunnel 3:5.80-1
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2462083
-	TODO: check, unclear upstream status, AI generated report
+	NOTE: https://www.stunnel.org/CVE-2026-70367.html
 CVE-2026-69704 (Atals-Livre contains a SQL injection vulnerability that allows attacke ...)
 	NOT-FOR-US: Atals-Livre
 CVE-2026-69703 (Atlas-Livre contains an improper access control vulnerability in the a ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e8589e6b9e8013c400b3f8f2244f256d7f636731

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e8589e6b9e8013c400b3f8f2244f256d7f636731
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260808/50615126/attachment.htm>