[Git][security-tracker-team/security-tracker][master] new libvirt issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e28bd191 by Moritz Muehlenhoff at 2026-08-12T17:08:23+02:00
new libvirt issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2527,7 +2527,9 @@ CVE-2026-66761 (SAP Approuter does not enforce sufficient flow control in certai
 CVE-2026-66760 (SAP Approuter does not correctly validate client certificates in certa ...)
 	NOT-FOR-US: SAP
 CVE-2026-63622 (A flaw was found in libvirt. A local attacker, specifically a process  ...)
-	TODO: check
+	- libvirt <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2513065
+	NOTE: https://gitlab.com/libvirt/libvirt/-/commit/801160fd414ca2cc402bc01ead09b7ed4c3b8f5b
 CVE-2026-5304 (An ACAP configuration file lacks input validation, which could potenti ...)
 	NOT-FOR-US: Axis Communication
 CVE-2026-5303 (The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) ra ...)
@@ -2958,7 +2960,9 @@ CVE-2026-64941 (URL Redirection to Untrusted Site ('Open Redirect') vulnerabilit
 CVE-2026-64940 (Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contai ...)
 	NOT-FOR-US: Nishishi Factory
 CVE-2026-63623 (A flaw was found in libvirt. During storage volume clone or convert op ...)
-	TODO: check
+	- libvirt <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2513066
+	NOTE: https://gitlab.com/libvirt/libvirt/-/commit/69335a484768d550854da1133d5490074695e825
 CVE-2026-63106 (ReadyEcommerce before 4.5.2 contains an unauthenticated SQL injection  ...)
 	NOT-FOR-US: ReadyEcommerceCrafty Controller
 CVE-2026-63105 (ReadyEcommerce before 4.5.2 contains a stored cross-site scripting (XS ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e28bd19105cb877f0f43804429ac32beacbda790

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e28bd19105cb877f0f43804429ac32beacbda790
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260812/5473ab73/attachment.htm>