[Git][security-tracker-team/security-tracker][master] Add CVE-2026-39879/syslog-ng

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cd3dec5e by Salvatore Bonaccorso at 2026-07-20T22:23:37+02:00
Add CVE-2026-39879/syslog-ng

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -216,7 +216,12 @@ CVE-2026-42210 (Webmin is a web-based system administration tool for Unix-like s
 CVE-2026-40187 (In egroupware version 26.0 and earlier, an authenticated administrator ...)
 	- egroupware <removed>
 CVE-2026-39879 (Due to a missing sanitization call in [`afsql_dd_run_query`](https://g ...)
-	TODO: check
+	- syslog-ng <unfixed>
+	NOTE: https://github.com/syslog-ng/syslog-ng/security/advisories/GHSA-qwf9-6222-m24m
+	NOTE: https://github.com/syslog-ng/syslog-ng/commit/1e872e301436efa5d3fcd54e7628ac82c57698d2 (syslog-ng-4.12.0)
+	NOTE: https://github.com/syslog-ng/syslog-ng/commit/1aba7537f0c406090f98a649475acbf517440220 (syslog-ng-4.12.0)
+	NOTE: https://github.com/syslog-ng/syslog-ng/commit/4b61a0b1dad69368bc3b93b607141708d0036830 (syslog-ng-4.12.0)
+	NOTE: https://github.com/syslog-ng/syslog-ng/commit/4c0aebf7a1c0a8177bdf4fb67803e19dddc3dbf2 (syslog-ng-4.12.0)
 CVE-2026-39878 (Chamilo LMS versions 1.11.38 and earlier contain a stored cross-site s ...)
 	NOT-FOR-US: Chamilo LMS
 CVE-2026-39385 (Frappe LMS is an open source learning management system. In version 2. ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd3dec5e54ba1be5a7577c5e4a79b65b5b0fe7d9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd3dec5e54ba1be5a7577c5e4a79b65b5b0fe7d9
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260720/9f4c4b6b/attachment-0001.htm>