[Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sun Aug 23 20:12:52 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
2c26a5d0 by security tracker role at 2026-08-23T19:12:44+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,4 +1,34 @@
-CVE-2026-75922
+CVE-2026-9769 (justhtml through 1.9.1 (fixed in 1.10.0) is vulnerable to uncontrolled ...)
+ TODO: check
+CVE-2026-8630 (justhtml before 1.12.0 (versions <= 1.11.0) contains a mutation cross- ...)
+ TODO: check
+CVE-2026-8445 (justhtml versions <= 1.11.0 (fixed in 1.12.0) do not sufficiently esca ...)
+ TODO: check
+CVE-2026-7808 (justhtml before 1.16.0 contains multiple HTML sanitization bypass issu ...)
+ TODO: check
+CVE-2026-78155 (privilege escalation in StackGres operator allows a low-privilege tena ...)
+ TODO: check
+CVE-2026-78115 (A vulnerability has been found in SourceCodester Class and Exam Timeta ...)
+ TODO: check
+CVE-2026-78112 (A flaw has been found in itsourcecode Hospital Management System Proje ...)
+ TODO: check
+CVE-2026-77088 (justhtml versions 0.9.0 through 1.21.0 contain a cross-site scripting ...)
+ TODO: check
+CVE-2026-74793 (justhtml before 3.11.0 contains a cross-site scripting vulnerability w ...)
+ TODO: check
+CVE-2026-6827 (justhtml before 1.17.0 contains multiple security issues in sanitizati ...)
+ TODO: check
+CVE-2026-5751 (justhtml versions 1.13.0 and earlier contain a parser-differential / m ...)
+ TODO: check
+CVE-2026-5389 (justhtml versions before 1.13.0 contain a cross-site scripting vulnera ...)
+ TODO: check
+CVE-2026-5388 (justhtml before 1.15.0 contains multiple security issues in URL saniti ...)
+ TODO: check
+CVE-2026-4671 (justhtml before 1.18.0 contains multiple low-severity denial-of-servic ...)
+ TODO: check
+CVE-2026-10053 (GitLab has remediated an issue in GitLab CE/EE affecting all versions ...)
+ TODO: check
+CVE-2026-75922 (Reverse::Proxy versions before 0.04 for Perl allow HTTP request smuggl ...)
NOT-FOR-US: Reverse::Proxy Perl module
CVE-2026-19542 [Out-of-bounds stack array access in tdelete]
- glibc 2.43-4
@@ -6113,6 +6143,7 @@ CVE-2026-75900 (An out-of-bounds read vulnerability was found in swtpm's SWTPM_N
NOTE: Fixed by: https://github.com/stefanberger/swtpm/commit/afc9e512a0459b12776e8fa509cfa039908c6be6 (v0.10.2)
NOTE: Fixed by: https://github.com/stefanberger/swtpm/commit/30454bc4f6b946fd6296534cccec95432446f8a2 (v0.7.5)
CVE-2026-70906 (Vulnerability in Oracle Java SE (component: 2D). Supported versions t ...)
+ {DSA-6460-1}
- openjdk-26 26.0.2.1+1-1
- openjdk-25 25.0.4.1+1-1
- openjdk-21 <not-affected> (Vulnerable code not present)
@@ -6121,7 +6152,7 @@ CVE-2026-70906 (Vulnerability in Oracle Java SE (component: 2D). Supported vers
- openjdk-8 <not-affected> (Vulnerable code not present)
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-08-18
CVE-2026-61308 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DSA-6457-1}
+ {DSA-6460-1 DSA-6457-1}
- openjdk-26 26.0.2.1+1-1
- openjdk-25 25.0.4.1+1-1
- openjdk-21 21.0.12.1+1-1
@@ -6130,7 +6161,7 @@ CVE-2026-61308 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-8 8u504-ga-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-08-18
CVE-2026-70907 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DSA-6457-1}
+ {DSA-6460-1 DSA-6457-1}
- openjdk-26 26.0.2.1+1-1
- openjdk-25 25.0.4.1+1-1
- openjdk-21 21.0.12.1+1-1
@@ -6139,7 +6170,7 @@ CVE-2026-70907 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-8 8u504-ga-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-08-18
CVE-2026-60589 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DSA-6457-1}
+ {DSA-6460-1 DSA-6457-1}
- openjdk-26 26.0.2.1+1-1
- openjdk-25 25.0.4.1+1-1
- openjdk-21 21.0.12.1+1-1
@@ -6334,7 +6365,7 @@ CVE-2026-75032 (A flaw was found in BlueZ. Insufficient validation of packet len
NOTE: Fixed by: https://github.com/bluez/bluez/commit/bd8989620ed6e80755f06cfdb18f5b4a3913493c
NOTE: Followup: https://github.com/bluez/bluez/commit/58088149872d014684a582fdb7ad01a5180c9bc5
CVE-2026-74990 (Internally found bugs present in Thunderbird ESR 140.13, Thunderbird E ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6348,7 +6379,7 @@ CVE-2026-74988 (Internally found bugs present in Thunderbird ESR 153.0 and Thund
- firefox 154.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-74/#CVE-2026-74988
CVE-2026-74987 (Internally found bugs present in Thunderbird ESR 140.13, Thunderbird E ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6365,7 +6396,7 @@ CVE-2026-74984 (Race condition in the JavaScript Engine component. This vulnerab
- firefox 154.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-74/#CVE-2026-74984
CVE-2026-74983 (Mitigation bypass in the Data Loss Prevention component. This vulnerab ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6391,7 +6422,7 @@ CVE-2026-74977 (Integer overflow in the Graphics component. This vulnerability w
- firefox 154.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-74/#CVE-2026-74977
CVE-2026-74976 (JIT miscompilation in the JavaScript Engine: JIT component. This vulne ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6402,7 +6433,7 @@ CVE-2026-74975 (Spoofing issue in the Downloads component in Firefox for Android
- firefox <not-affected> (Only affects Firefox on Android)
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-74/#CVE-2026-74975
CVE-2026-74974 (Same-origin policy bypass in the Graphics: ImageLib component. This vu ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6410,7 +6441,7 @@ CVE-2026-74974 (Same-origin policy bypass in the Graphics: ImageLib component. T
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-76/#CVE-2026-74974
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-79/#CVE-2026-74974
CVE-2026-74973 (Race condition, use-after-free in the Graphics component. This vulnera ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6418,7 +6449,7 @@ CVE-2026-74973 (Race condition, use-after-free in the Graphics component. This v
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-76/#CVE-2026-74973
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-79/#CVE-2026-74973
CVE-2026-74972 (Information disclosure in the DOM: Push Subscriptions component. This ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6426,7 +6457,7 @@ CVE-2026-74972 (Information disclosure in the DOM: Push Subscriptions component.
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-76/#CVE-2026-74972
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-79/#CVE-2026-74972
CVE-2026-74971 (Information disclosure in the DOM: UI Events & Focus Handling componen ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6437,7 +6468,7 @@ CVE-2026-74970 (Site isolation issue in the Graphics component. This vulnerabili
- firefox 154.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-74/#CVE-2026-74970
CVE-2026-74969 (Use-after-free in the Layout: Text and Fonts component. This vulnerabi ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6448,7 +6479,7 @@ CVE-2026-74968 (Site isolation issue in the Graphics: WebRender component. This
- firefox 154.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-74/#CVE-2026-74968
CVE-2026-74967 (Same-origin policy bypass in the Audio/Video: Playback component. This ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6459,7 +6490,7 @@ CVE-2026-74966 (Information disclosure in the Form Autofill component. This vuln
- firefox 154.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-74/#CVE-2026-74966
CVE-2026-74965 (Privilege escalation in the Shell Integration component. This vulnerab ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6467,7 +6498,7 @@ CVE-2026-74965 (Privilege escalation in the Shell Integration component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-76/#CVE-2026-74965
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-79/#CVE-2026-74965
CVE-2026-74964 (Integer overflow in the Graphics component. This vulnerability was fix ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6475,7 +6506,7 @@ CVE-2026-74964 (Integer overflow in the Graphics component. This vulnerability w
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-76/#CVE-2026-74964
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-79/#CVE-2026-74964
CVE-2026-74963 (Same-origin policy bypass in the Networking: Cookies component. This v ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6483,7 +6514,7 @@ CVE-2026-74963 (Same-origin policy bypass in the Networking: Cookies component.
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-76/#CVE-2026-74963
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-79/#CVE-2026-74963
CVE-2026-74962 (Site isolation issue in the Networking: Cookies component. This vulner ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6494,7 +6525,7 @@ CVE-2026-74961 (Side-channel in the Web Audio component. This vulnerability was
- firefox 154.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-74/#CVE-2026-74961
CVE-2026-74960 (Site isolation issue in the WebExtensions component. This vulnerabilit ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6502,7 +6533,7 @@ CVE-2026-74960 (Site isolation issue in the WebExtensions component. This vulner
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-76/#CVE-2026-74960
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-79/#CVE-2026-74960
CVE-2026-74959 (Mitigation bypass in the Storage: Cache API component. This vulnerabil ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6513,7 +6544,7 @@ CVE-2026-74958 (Information disclosure in the WebRTC component. This vulnerabili
- firefox 154.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-74/#CVE-2026-74958
CVE-2026-74957 (Mitigation bypass in the Safe Browsing component. This vulnerability w ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6530,7 +6561,7 @@ CVE-2026-74954 (Information disclosure due to side-channel in the Storage: Cache
- firefox 154.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-74/#CVE-2026-74954
CVE-2026-74953 (Privilege escalation in the Networking: Cookies component. This vulner ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6547,7 +6578,7 @@ CVE-2026-74950 (Privilege escalation in the Downloads API component. This vulner
- firefox 154.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-74/#CVE-2026-74950
CVE-2026-74949 (Privilege escalation due to use-after-free in the Graphics: Canvas2D c ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6555,7 +6586,7 @@ CVE-2026-74949 (Privilege escalation due to use-after-free in the Graphics: Canv
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-76/#CVE-2026-74949
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-79/#CVE-2026-74949
CVE-2026-74948 (Information disclosure in the Graphics component. This vulnerability w ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6566,7 +6597,7 @@ CVE-2026-74947 (Privilege escalation due to invalid pointer in the Graphics comp
- firefox 154.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-74/#CVE-2026-74947
CVE-2026-74946 (Privilege escalation due to incorrect boundary conditions in the Graph ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6574,7 +6605,7 @@ CVE-2026-74946 (Privilege escalation due to incorrect boundary conditions in the
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-76/#CVE-2026-74946
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-79/#CVE-2026-74946
CVE-2026-74945 (Information disclosure in the Graphics: Text component. This vulnerabi ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6582,7 +6613,7 @@ CVE-2026-74945 (Information disclosure in the Graphics: Text component. This vul
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-76/#CVE-2026-74945
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-79/#CVE-2026-74945
CVE-2026-74944 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6590,7 +6621,7 @@ CVE-2026-74944 (Use-after-free in the DOM: Core & HTML component. This vulnerabi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-76/#CVE-2026-74944
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-79/#CVE-2026-74944
CVE-2026-74943 (Use-after-free in the Graphics: ImageLib component. This vulnerability ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6598,7 +6629,7 @@ CVE-2026-74943 (Use-after-free in the Graphics: ImageLib component. This vulnera
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-76/#CVE-2026-74943
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-79/#CVE-2026-74943
CVE-2026-74942 (Privilege escalation in the Remote Settings Client component. This vul ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6606,7 +6637,7 @@ CVE-2026-74942 (Privilege escalation in the Remote Settings Client component. Th
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-76/#CVE-2026-74942
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-79/#CVE-2026-74942
CVE-2026-74941 (Privilege escalation in the Graphics: CanvasWebGL component. This vuln ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6614,7 +6645,7 @@ CVE-2026-74941 (Privilege escalation in the Graphics: CanvasWebGL component. Thi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-76/#CVE-2026-74941
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-79/#CVE-2026-74941
CVE-2026-74940 (Use-after-free in the Graphics: Text component. This vulnerability was ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6622,7 +6653,7 @@ CVE-2026-74940 (Use-after-free in the Graphics: Text component. This vulnerabili
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-76/#CVE-2026-74940
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-79/#CVE-2026-74940
CVE-2026-74939 (Privilege escalation in the DOM: Navigation component. This vulnerabil ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6636,7 +6667,7 @@ CVE-2026-74937 (Use-after-free in the JavaScript: GC component. This vulnerabili
- firefox 154.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-74/#CVE-2026-74937
CVE-2026-74936 (Use-after-free in the JavaScript: WebAssembly component. This vulnerab ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6644,7 +6675,7 @@ CVE-2026-74936 (Use-after-free in the JavaScript: WebAssembly component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-76/#CVE-2026-74936
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-79/#CVE-2026-74936
CVE-2026-74935 (Privilege escalation in the DOM: Networking component. This vulnerabil ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
@@ -6652,7 +6683,7 @@ CVE-2026-74935 (Privilege escalation in the DOM: Networking component. This vuln
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-76/#CVE-2026-74935
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-79/#CVE-2026-74935
CVE-2026-74934 (Site isolation issue in the Graphics: CanvasWebGL component. This vuln ...)
- {DSA-6451-1 DLA-4750-1}
+ {DSA-6461-1 DSA-6451-1 DLA-4750-1}
- firefox 154.0-1
- firefox-esr 140.14.0esr-2
- thunderbird 1:140.14.0esr-1
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2c26a5d07d16634dff290dcd1edbb73bb3e7b97f
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2c26a5d07d16634dff290dcd1edbb73bb3e7b97f
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260823/6cda0519/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list