[Git][security-tracker-team/security-tracker][master] Add new policycoreutils isues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
860866cb by Salvatore Bonaccorso at 2026-07-26T14:58:42+02:00
Add new policycoreutils isues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2507,7 +2507,12 @@ CVE-2026-61943 (Unauthenticated Broken Access Control in WPDM \u2013 Premium Pac
 CVE-2026-59678 (An Incorrect Authorization vulnerability in Linux-Gaming PortProtonQt  ...)
 	NOT-FOR-US: Linux-Gaming PortProtonQt
 CVE-2026-59677 (A Missing Authorization vulnerability in selinux policycoreutils seuns ...)
-	TODO: check
+	- policycoreutils 2.7-1
+	- selinux-python 3.7-1
+	NOTE: src:policycoreutils 2.7 dropped sandbox/seunshare.c core and stopped building
+	NOTE: policycoreutils-sandbox. Built from selinux-python until 3.7-1 and moved to a
+	NOTE: separate upstream package.
+	NOTE: https://security.opensuse.org/2026/07/15/selinux-seunshare.html
 CVE-2026-59555 (Unauthenticated Arbitrary File Deletion in Participants Database <= 2. ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-59554 (Unauthenticated Broken Authentication in Ziina <= 1.2.21 versions.)
@@ -2832,7 +2837,12 @@ CVE-2026-60367 (Vulnerability in the Oracle Platform Security for Java product o
 CVE-2026-60366 (Vulnerability in the Oracle Platform Security for Java product of Orac ...)
 	NOT-FOR-US: Oracle
 CVE-2026-59676 (A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in s ...)
-	TODO: check
+	- policycoreutils 2.7-1
+	- selinux-python 3.7-1
+	NOTE: src:policycoreutils 2.7 dropped sandbox/seunshare.c core and stopped building
+	NOTE: policycoreutils-sandbox. Built from selinux-python until 3.7-1 and moved to a
+	NOTE: separate upstream package.
+	NOTE: https://security.opensuse.org/2026/07/15/selinux-seunshare.html
 CVE-2026-38766 (An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a l ...)
 	NOT-FOR-US: Unistal Systems Pvt. Ltd.Protegent 360
 CVE-2026-38765 (An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a l ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/860866cbfa820323807a7822c8de880c16152bd2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/860866cbfa820323807a7822c8de880c16152bd2
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260726/66eedba9/attachment.htm>