[Git][security-tracker-team/security-tracker][master] Add new lemur issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
eebc0479 by Salvatore Bonaccorso at 2026-08-19T08:51:59+02:00
Add new lemur issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -836,15 +836,15 @@ CVE-2026-56684 (Valkey is a distributed key-value database. Prior to 7.2.14, 8.0
 CVE-2026-55839 (Kestra is an open-source, event-driven orchestration platform. Prior t ...)
 	TODO: check
 CVE-2026-55166 (Lemur manages TLS certificate creation. Prior to 1.9.2, authenticated  ...)
-	TODO: check
+	- lemur <itp> (bug #809533)
 CVE-2026-55165 (Lemur manages TLS certificate creation. Prior to 1.9.2, the JWT verifi ...)
-	TODO: check
+	- lemur <itp> (bug #809533)
 CVE-2026-55164 (Lemur manages TLS certificate creation. Prior to 1.9.2, lemur.users.se ...)
-	TODO: check
+	- lemur <itp> (bug #809533)
 CVE-2026-55163 (Lemur manages TLS certificate creation. Prior to 1.9.2, PUT /api/1/rol ...)
-	TODO: check
+	- lemur <itp> (bug #809533)
 CVE-2026-55162 (Lemur manages TLS certificate creation. Prior to 1.9.2, lemur/certific ...)
-	TODO: check
+	- lemur <itp> (bug #809533)
 CVE-2026-55106 (authentik is an open-source identity provider. Prior to 2026.2.6 and 2 ...)
 	TODO: check
 CVE-2026-54730 (authentik is an open-source identity provider. Prior to 2026.2.6 and 2 ...)
@@ -910,7 +910,7 @@ CVE-2026-48798 (SSH.NET is a Secure Shell (SSH) library for .NET. In 2025.1.0 an
 CVE-2026-48744 (Saleor is an e-commerce platform. From 3.14.67 until 3.21.67, 3.22.63, ...)
 	TODO: check
 CVE-2026-48508 (Lemur manages TLS certificate creation. Prior to 1.9.1, StrictRolePerm ...)
-	TODO: check
+	- lemur <itp> (bug #809533)
 CVE-2026-47630 (NVIDIA Triton Inference Server for Linux contains a vulnerability wher ...)
 	NOT-FOR-US: NVIDIA
 CVE-2026-47629 (NVIDIA Triton Inference Server for Linux contains a vulnerability wher ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eebc0479e67ced4536b39932a9f484999bfef61d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eebc0479e67ced4536b39932a9f484999bfef61d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260819/83e89184/attachment.htm>