[Git][security-tracker-team/security-tracker][master] Add CVE-2026-23893/opencryptoki

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Jan 22 21:38:15 GMT 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b9e2de67 by Salvatore Bonaccorso at 2026-01-22T22:37:44+01:00
Add CVE-2026-23893/opencryptoki

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -145,7 +145,9 @@ CVE-2026-23951 (SumatraPDF is a multi-format reader for Windows. All versions co
 CVE-2026-23946 (Tendenci is an open source content management system built for non-pro ...)
 	NOT-FOR-US: Tendenci CMS
 CVE-2026-23893 (openCryptoki is a PKCS#11 library and provides tooling for Linux and A ...)
-	TODO: check
+	- opencryptoki <unfixed>
+	NOTE: https://github.com/opencryptoki/opencryptoki/security/advisories/GHSA-j6c7-mvpx-jx5q
+	NOTE: Fixed by: https://github.com/opencryptoki/opencryptoki/commit/5e6e4b42f2b1fcc1e4ef1b920e463bfa55da8b45
 CVE-2026-23887 (Group-Office is an enterprise customer relationship management and gro ...)
 	NOT-FOR-US: Group-Office
 CVE-2026-23873 (hustoj is an open source online judge based on PHP/C++/MySQL/Linux for ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b9e2de6769a2b29290e115a3ef3e54bad3032110

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b9e2de6769a2b29290e115a3ef3e54bad3032110
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260122/7f3f3f57/attachment.htm>


More information about the debian-security-tracker-commits mailing list