[Git][security-tracker-team/security-tracker][master] Add two new etcd issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1d796889 by Salvatore Bonaccorso at 2026-08-13T10:33:07+02:00
Add two new etcd issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -7,9 +7,14 @@ CVE-2026-73501 (kin-openapi is a Go project for handling OpenAPI files. Prior to
 	NOTE: https://github.com/getkin/kin-openapi/security/advisories/GHSA-r277-6w6q-xmqw
 	NOTE: Fixed by: https://github.com/getkin/kin-openapi/commit/f0407d53b0730280266f454b755010e7eeb985da (v0.144.0)
 CVE-2026-73500 (etcd is a distributed key-value store for the data of a distributed sy ...)
-	TODO: check
+	- etcd <unfixed>
+	NOTE: https://github.com/etcd-io/etcd/security/advisories/GHSA-6vch-q96h-7gc3
+	NOTE: https://github.com/etcd-io/etcd/pull/22130
+	NOTE: Fixed by: https://github.com/etcd-io/etcd/commit/f73cba7d920019f91a1ea1f6697833e42731f057 (v3.5.33)
 CVE-2026-73499 (etcd is a distributed key-value store for the data of a distributed sy ...)
-	TODO: check
+	- etcd <unfixed>
+	NOTE: https://github.com/etcd-io/etcd/security/advisories/GHSA-xg4h-6gfc-h4m8
+	NOTE: Fixed by: https://github.com/etcd-io/etcd/commit/e863b001bbf3367003a543aa3099db9892134cd7 (v3.5.33)
 CVE-2026-73498 (MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian p ...)
 	NOT-FOR-US: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products
 CVE-2026-73495 (blaze is a Scala library for building asynchronous pipelines, with a f ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1d796889cb70fb9f784db84f00fb7e4bdc00db6b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1d796889cb70fb9f784db84f00fb7e4bdc00db6b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260813/a15de290/attachment.htm>