[Git][security-tracker-team/security-tracker][master] Add clarifying note for inetutils issue

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Feb 20 20:58:14 GMT 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2e2afd08 by Salvatore Bonaccorso at 2026-02-20T21:57:46+01:00
Add clarifying note for inetutils issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2490,6 +2490,7 @@ CVE-2026-XXXX [telnetd: don't allow systemd service credentials]
 	[bookworm] - inetutils <ignored> (Not exploitable with util-linux/login Version in Debian bookworm)
 	NOTE: https://lists.gnu.org/archive/html/bug-inetutils/2026-02/msg00000.html
 	NOTE: Fixed by: https://codeberg.org/inetutils/inetutils/commit/4db2f19f4caac03c7f4da6363c140bd70df31386
+	NOTE: systemd service credentials support for login(1) from util-linux introduced in 2.40 release
 CVE-2026-2545 (A weakness has been identified in LigeroSmart up to 6.1.26. Impacted i ...)
 	NOT-FOR-US: LigeroSmart
 CVE-2026-2544 (A security flaw has been discovered in yued-fe LuLu UI up to 3.0.0. Th ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2e2afd086e294eceb1b9f0a8023881fef7cf7cce

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2e2afd086e294eceb1b9f0a8023881fef7cf7cce
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260220/4214af10/attachment.htm>


More information about the debian-security-tracker-commits mailing list