[Git][security-tracker-team/security-tracker][master] Track proposed update for modsecurity via trixie-pu
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Thu Jul 16 20:25:27 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
e64f5034 by Salvatore Bonaccorso at 2026-07-16T21:24:30+02:00
Track proposed update for modsecurity via trixie-pu
- - - - -
2 changed files:
- data/CVE/list
- data/next-point-update.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -3883,6 +3883,7 @@ CVE-2026-52761 (ModSecurity is an open source, cross platform web application fi
NOTE: Fixed by: https://github.com/owasp-modsecurity/ModSecurity/commit/edcd010814e234d46e2ec55a0f1078ff9d3032e4 (v3.0.16)
CVE-2026-52747 (ModSecurity is an open source, cross platform web application firewall ...)
- modsecurity 3.0.16-1 (bug #1141961)
+ [trixie] - modsecurity <no-dsa> (Minor issue; will be fixed via point release)
NOTE: https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-rcw9-2f5r-7p88
NOTE: Fixed by: https://github.com/owasp-modsecurity/ModSecurity/commit/875504c2758169c41be1ad2f0cc64d896b7815d7 (v3.0.16)
CVE-2026-4661 (The WP CTA \u2013 Sticky CTA Builder, Generate Leads, Promote Sales pl ...)
=====================================
data/next-point-update.txt
=====================================
@@ -186,3 +186,7 @@ CVE-2026-44517
[trixie] - golang-github-containers-buildah 1.39-3+ds1-1+deb13u1
CVE-2026-29509
[trixie] - patool 4.0.0-1+deb13u1
+CVE-2026-52747
+ [trixie] - modsecurity 3.0.14-1+deb13u2
+CVE-2026-52761
+ [trixie] - modsecurity 3.0.14-1+deb13u2
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e64f5034e9858c3c7952956ac1a5c4337816b432
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e64f5034e9858c3c7952956ac1a5c4337816b432
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260716/262fd54a/attachment.htm>
More information about the debian-security-tracker-commits
mailing list