[Git][security-tracker-team/security-tracker][master] Add new opennds issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
996a1f8c by Salvatore Bonaccorso at 2026-08-28T21:00:40+02:00
Add new opennds issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1018,13 +1018,18 @@ CVE-2026-44629 (Improper access control to the Synergis Softwire installation fo
 CVE-2026-3129 (The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-38822 (In openNDS before 11.0.0, the client_params.sh script, invoked by the  ...)
-	TODO: check
+	- opennds <unfixed>
+	NOTE: Fixed by: https://github.com/openNDS/openNDS/commit/294983e859bb678eef7db06fc9f6afab0b489d8e (v11.0.0)
 CVE-2026-38821 (A heap-based buffer overflow vulnerability exists in openNDS before 11 ...)
-	TODO: check
+	- opennds <unfixed>
+	NOTE: Fixed by: https://github.com/openNDS/openNDS/commit/3b5f7ef40cd048826d3c4a16f61a73a1768fd5a9 (v11.0.0)
 CVE-2026-38820 (openNDS before 11.0.0 is susceptible to unauthenticated OS command exe ...)
-	TODO: check
+	- opennds <unfixed>
+	NOTE: Fixed by: https://github.com/openNDS/openNDS/commit/8c03750d9a17d601fa7bd03ae7cde20c7c8d1252 (v11.0.0)
 CVE-2026-38819 (Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticate ...)
-	TODO: check
+	- opennds <unfixed>
+	NOTE: Fixed by: https://github.com/openNDS/openNDS/commit/f2332e68c6d34f8403db346e380fff3817020d5c (v11.0.0)
+	NOTE: Fixed by: https://github.com/openNDS/openNDS/commit/b2801d9f14af44a23be7e9a1c378623bc5947c4c (v11.0.0)
 CVE-2026-38350 (An integer overflow in the target_sws_fuzzer() function (libswscale/ou ...)
 	TODO: check
 CVE-2026-38349 (An integer overflow in the hScale16To19_c() function (libswscale/outpu ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/996a1f8c5bd4ff785929ec906e8cad54b7793a3d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/996a1f8c5bd4ff785929ec906e8cad54b7793a3d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260828/f42ba3eb/attachment-0001.htm>