[Git][security-tracker-team/security-tracker][master] bugnums

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
23943b5f by Moritz Muehlenhoff at 2026-07-02T21:54:46+02:00
bugnums

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -446,8 +446,8 @@ CVE-2026-55660 (Tina is a headless content management system. In versions prior
 CVE-2026-55153 (mchange-commons-java is a Java library of shared utility classes used  ...)
 	- mchange-commons-java <itp> (bug #806774)
 CVE-2026-54908 (Pion DTLS is a Go implementation of Datagram Transport Layer Security. ...)
-	- golang-github-pion-dtls.v2 <unfixed>
-	- golang-github-pion-dtls.v3 <unfixed>
+	- golang-github-pion-dtls.v2 <unfixed> (bug #1141306)
+	- golang-github-pion-dtls.v3 <unfixed> (bug #1141307)
 	NOTE: https://github.com/pion/dtls/security/advisories/GHSA-wg4g-wm44-ch5j
 	NOTE: https://github.com/pion/dtls/pull/839
 CVE-2026-54786 (Wasmtime is a runtime for WebAssembly. All versions prior to 24.0.10;  ...)
@@ -1034,11 +1034,11 @@ CVE-2026-20191 (A vulnerability in Cisco Catalyst Center could allow an unauthen
 CVE-2026-14358 (Improper neutralization of input during web page generation ('cross-si ...)
 	TODO: check
 CVE-2026-14330 (Multiple unbounded alloca() calls in the PulseAudio protocol server.)
-	- pulseaudio <unfixed>
+	- pulseaudio <unfixed> (bug #1141309)
 	[trixie] - pulseaudio <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2495907
 CVE-2026-14324 (RAOP module accepts unbounded Content-Length values and does not check ...)
-	- pipewire <unfixed>
+	- pipewire <unfixed> (bug #1141308)
 	[trixie] - pipewire <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2495903
 CVE-2026-14258 (A flaw was found in dhcpcd's IPv6 Neighbor Discovery Router Advertisem ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/23943b5fd5818de657b828717625d95d78532da5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/23943b5fd5818de657b828717625d95d78532da5
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260702/5d7ef8d4/attachment.htm>