[Git][security-tracker-team/security-tracker][master] Add Debian bug references for reported issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
464e5ce4 by Salvatore Bonaccorso at 2026-08-09T07:37:21+02:00
Add Debian bug references for reported issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -112,7 +112,7 @@ CVE-2026-59717 (Home Assistant is open source home automation software focused o
 CVE-2026-58262 (Klever-Go is the Go implementation of the Klever blockchain protocol.  ...)
 	NOT-FOR-US: Klever-Go
 CVE-2026-54338 (JupyterHub is software that allows users to create a multi-user server ...)
-	- jupyterhub <unfixed>
+	- jupyterhub <unfixed> (bug #1143967)
 	NOTE: https://github.com/jupyterhub/jupyterhub/security/advisories/GHSA-p43p-whwx-q52h
 	NOTE: Fixed by: https://github.com/jupyterhub/jupyterhub/commit/d6dc595f84b7509969686da31d87d6d69e7fce0a (5.5.0)
 CVE-2026-52880 (Klever-Go is the Go implementation of the Klever blockchain protocol.  ...)
@@ -130,7 +130,7 @@ CVE-2026-48169 (PraisonAI is a multi-agent teams system. Versions prior to 0.1.4
 CVE-2026-48122 (Ruby LSP is an implementation of the language server protocol for Ruby ...)
 	NOT-FOR-US: VS Code extension for Ruby LSP (not in src:ruby-ruby-lsp )
 CVE-2026-48120 (Kakoune is a code editor. Prior to version 2026.05.21, the bundled, en ...)
-	- kakoune <unfixed>
+	- kakoune <unfixed> (bug #1143968)
 	NOTE: https://github.com/mawww/kakoune/security/advisories/GHSA-h99r-h8cp-vwcq
 	NOTE: Fixed by: https://github.com/mawww/kakoune/commit/25c7b13b244fd1ddacc63ecfe1784b5ebc2ba825 (v2026.05.21)
 CVE-2026-48047 (XWiki Platform WebJars API is a package for XWiki, a generic wiki plat ...)
@@ -454,7 +454,7 @@ CVE-2026-19082 (Imager versions from 0.45_02 before 1.034 for Perl may expose ad
 	NOTE: https://github.com/tonycoz/imager/security/advisories/GHSA-hx46-55wp-hv6m
 	NOTE: Fixed by: https://github.com/tonycoz/imager/commit/24bde0427a113264d53f45a9c29ae756d84c82fe (v1.034)
 CVE-2026-19079 (A TOCTOU (Time-of-Check-Time-of-Use) race condition vulnerability was  ...)
-	- policycoreutils <unfixed>
+	- policycoreutils <unfixed> (bug #1143965)
 	NOTE: Fixed by: https://github.com/SELinuxProject/selinux/commit/a556538c2d5d2583273e025b45c02651fef47679
 CVE-2026-18497 (A heap-buffer-overflow vulnerability exists in the nothings stb TrueTy ...)
 	TODO: check
@@ -919,7 +919,7 @@ CVE-2026-19058 (A vulnerability was found in FoundationAgents MetaGPT up to 0.8.
 CVE-2026-19054 (A vulnerability was detected in Lspace-io lspace-server up to 79f02fe5 ...)
 	NOT-FOR-US: Lspace-io lspace-server
 CVE-2026-18487 (A flaw was found in Epiphany. An issue in how the browser reads web ad ...)
-	- epiphany-browser <unfixed>
+	- epiphany-browser <unfixed> (bug #1143966)
 	NOTE: https://gitlab.gnome.org/GNOME/epiphany/-/work_items/2897
 	NOTE: https://gitlab.gnome.org/GNOME/epiphany/-/commit/13dd600719d7aac532ed6c84ea0d12dd372d4ac4
 CVE-2026-18367 (A privilege escalation vulnerability allows local users to execute arb ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/464e5ce4ff78a672aa57fefe450e0170828ac420

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/464e5ce4ff78a672aa57fefe450e0170828ac420
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260809/3ca77b4f/attachment.htm>