[Git][security-tracker-team/security-tracker][master] NFU CVE-2026-49488

[Henri Salo (@hsalo-guest)]

Henri Salo pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6a3365a3 by Henri Salo at 2026-07-14T13:38:42+03:00
NFU CVE-2026-49488

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3918,8 +3918,7 @@ CVE-2026-XXXX [InspIRCd Security Advisory 2026-01]
 CVE-2026-33264 (A bug in `BaseSerialization.deserialize()` allowed unrestricted `impor ...)
 	- airflow <itp> (bug #819700)
 CVE-2026-49488
-	TODO: check
-	NOTE: https://www.openwall.com/lists/oss-security/2026/07/14/10
+	NOT-FOR-US: Apache OpenMeetings
 CVE-2026-49487 (In Apache Airflow before 3.3.0, the REST API task-instance detail and  ...)
 	- airflow <itp> (bug #819700)
 CVE-2026-48828 (The Bulk Variables API in Apache Airflow called the redactor without p ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6a3365a3bd3c1d5e3a679fccc86f1d3be14d0d3e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6a3365a3bd3c1d5e3a679fccc86f1d3be14d0d3e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260714/3cbfc2ea/attachment.htm>