[Git][security-tracker-team/security-tracker][master] automatic update

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
89d586c6 by security tracker role at 2026-02-17T08:12:55+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,19 @@
+CVE-2026-2592 (The Zarinpal Gateway for WooCommerce plugin for WordPress is vulnerabl ...)
+	TODO: check
+CVE-2026-2439 (Concierge::Sessions versions from 0.8.1 before 0.8.5 for Perl generate ...)
+	TODO: check
+CVE-2026-2002 (The Forminator Forms \u2013 Contact Form, Payment Form & Custom Form B ...)
+	TODO: check
+CVE-2026-26220 (LightLLM version 1.1.0 and prior contain an unauthenticated remote cod ...)
+	TODO: check
+CVE-2026-1657 (The EventPrime plugin for WordPress is vulnerable to unauthorized imag ...)
+	TODO: check
+CVE-2026-0829 (The Frontend File Manager Plugin WordPress plugin through 23.5 allows  ...)
+	TODO: check
+CVE-2025-15578 (Maypole versions from 2.10 through 2.13 for Perl generates session ids ...)
+	TODO: check
+CVE-2025-12062 (The WP Maps \u2013 Store Locator,Google Maps,OpenStreetMap,Mapbox,List ...)
+	TODO: check
 CVE-2026-2604
 	- evolution-data-server <unfixed>
 	NOTE: https://gitlab.gnome.org/GNOME/evolution-data-server/-/issues/627
@@ -8,7 +24,7 @@ CVE-2026-2574
 	- glib-networking <unfixed> (unimportant)
 	NOTE: https://gitlab.gnome.org/GNOME/glib-networking/-/issues/228
 	NOTE: OpenSSL backend disabled by default upstream and in Debian
-CVE-2026-2474 [heap buffer overflow in the XS function crypt_urandom_getrandom()]
+CVE-2026-2474 (Crypt::URandom versions from 0.41 before 0.55 for Perl is vulnerable t ...)
 	- libcrypt-urandom-perl 0.55-1
 	[trixie] - libcrypt-urandom-perl <no-dsa> (Minor issue)
 	[bookworm] - libcrypt-urandom-perl <not-affected> (Vulnerable code introduced later in 0.41)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/89d586c6529fe374119ee17fc13f4ecda41c3827

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/89d586c6529fe374119ee17fc13f4ecda41c3827
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260217/bc45b5b9/attachment.htm>