[Git][security-tracker-team/security-tracker][master] Add new foreman issues, itp'ed

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Jul 1 20:30:49 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2aafdd3a by Salvatore Bonaccorso at 2026-07-01T21:30:12+02:00
Add new foreman issues, itp'ed

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -23,13 +23,13 @@ CVE-2026-6283 (Improper neutralization of input during web page generation ('cro
 CVE-2026-5220 (Improper neutralization of input during web page generation ('cross-si ...)
 	TODO: check
 CVE-2026-5142 (A flaw was found in foreman. Authenticated users with 'view_keypairs'  ...)
-	TODO: check
+	- foreman <itp> (bug #663101)
 CVE-2026-5138 (A flaw was found in Foreman. An authenticated user with host-edit perm ...)
-	TODO: check
+	- foreman <itp> (bug #663101)
 CVE-2026-5136 (A flaw was found in Foreman. The Usergroup model in Foreman does not p ...)
-	TODO: check
+	- foreman <itp> (bug #663101)
 CVE-2026-5135 (A flaw was found in Foreman. This broken access control vulnerability  ...)
-	TODO: check
+	- foreman <itp> (bug #663101)
 CVE-2026-5120 (A Race Condition vulnerability affecting BIOVIA Workbook from Release  ...)
 	NOT-FOR-US: Dassault Systemes
 CVE-2026-5051 (HashiCorp Vault and Vault Enterprise prior to 2.0.1 audit device valid ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2aafdd3a6d19643dd325b3c3e85a1e5a0f8e9e94

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2aafdd3a6d19643dd325b3c3e85a1e5a0f8e9e94
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260701/09dbf2be/attachment.htm>


More information about the debian-security-tracker-commits mailing list