[Git][security-tracker-team/security-tracker][master] Add two new gnutls28 issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Mon Feb 9 20:53:12 GMT 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
199ac5c1 by Salvatore Bonaccorso at 2026-02-09T21:52:35+01:00
Add two new gnutls28 issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -95,8 +95,14 @@ CVE-2025-66630 (Fiber is an Express inspired web framework written in Go. Before
 	TODO: check
 CVE-2025-63354 (Hitron HI3120 v7.2.4.5.2b1 allows stored XSS via the Parental Control  ...)
 	NOT-FOR-US: Hitron HI3120
+CVE-2026-1584
+	- gnutls28 3.8.12-1
+	NOTE: https://gitlab.com/gnutls/gnutls/-/issues/1790
+	NOTE: Fixed by: https://gitlab.com/gnutls/gnutls/-/commit/acf67a4a68bc6d9ab7b882469c67f6cf28db56a0 (3.8.12)
 CVE-2025-14831 (A flaw was found in GnuTLS. This vulnerability allows a denial of serv ...)
-	TODO: check
+	- gnutls28 3.8.12-1
+	NOTE: https://gitlab.com/gnutls/gnutls/-/issues/1773
+	NOTE: Fixed by: https://gitlab.com/gnutls/gnutls/-/commit/d6054f0016db05fb5c82177ddbd0a4e8331059a1 (3.8.12)
 CVE-2025-14778 (A flaw was found in Keycloak. A significant Broken Access Control vuln ...)
 	- keycloak <itp> (bug #1088287)
 CVE-2025-10465 (Unrestricted Upload of File with Dangerous Type vulnerability in Birte ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/199ac5c1f4fab36a12e249cd1f35409e80f9202d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/199ac5c1f4fab36a12e249cd1f35409e80f9202d
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260209/57b3c3b0/attachment.htm>


More information about the debian-security-tracker-commits mailing list