[Git][security-tracker-team/security-tracker][master] Add two netty issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
27923d54 by Salvatore Bonaccorso at 2026-08-22T22:05:05+02:00
Add two netty issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -108,9 +108,11 @@ CVE-2026-62382 (PasswordPusher versions v1.45.11 through v2.9.5 contain an impro
 CVE-2026-62381 (luci-lib-px5g (LuCI) contains a heap-based buffer overflow in the nati ...)
 	NOT-FOR-US: luci-lib-px5g (LuCI)
 CVE-2026-62380 (Netty (io.netty:netty-codec-socks) versions 4.2.0.Final through 4.2.16 ...)
-	TODO: check
+	- netty <unfixed>
+	NOTE: https://github.com/netty/netty/security/advisories/GHSA-cc6x-ffm5-83wf
 CVE-2026-62243 (Netty (io.netty:netty-handler) versions from 4.2.0.Final through 4.2.1 ...)
-	TODO: check
+	- netty <unfixed>
+	NOTE: https://github.com/netty/netty/security/advisories/GHSA-p85m-gvr3-788c
 CVE-2026-62204 (SiYuan versions before v3.7.4 fail to validate that packageName matche ...)
 	NOT-FOR-US: SiYuan
 CVE-2026-60084 (SiYuan versions before v3.7.4 contain an arbitrary file deletion vulne ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/27923d5495571952b5539c8a4746d0d0f623e46b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/27923d5495571952b5539c8a4746d0d0f623e46b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260822/5975162d/attachment.htm>