[Git][security-tracker-team/security-tracker][master] Add new netty issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
52452fd6 by Salvatore Bonaccorso at 2026-07-29T22:53:28+02:00
Add new netty issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -121,17 +121,23 @@ CVE-2026-60112 (AMMOS Instrument Toolkit (AIT) GUI before 2.5.1 contains a missi
 CVE-2026-5060 (The MasterStudy LMS WordPress Plugin \u2013 for Online Courses and Edu ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-59920 (Netty is an asynchronous, event-driven network application framework.  ...)
-	TODO: check
+	- netty <unfixed>
+	NOTE: https://github.com/netty/netty/security/advisories/GHSA-3g8r-4pfx-jmfh
 CVE-2026-59919 (Netty is an asynchronous, event-driven network application framework.  ...)
-	TODO: check
+	- netty <unfixed>
+	NOTE: https://github.com/netty/netty/security/advisories/GHSA-wh89-7897-x99h
 CVE-2026-59901 (Netty is an asynchronous, event-driven network application framework.  ...)
-	TODO: check
+	- netty <unfixed>
+	NOTE: https://github.com/netty/netty/security/advisories/GHSA-558v-64gr-wgg4
 CVE-2026-59900 (Netty is an asynchronous, event-driven network application framework.  ...)
-	TODO: check
+	- netty <unfixed>
+	NOTE: https://github.com/netty/netty/security/advisories/GHSA-c69g-56f8-xwqj
 CVE-2026-59899 (Netty is an asynchronous, event-driven network application framework.  ...)
-	TODO: check
+	- netty <unfixed>
+	NOTE: https://github.com/netty/netty/security/advisories/GHSA-q4f6-jm68-57ww
 CVE-2026-59898 (Netty is an asynchronous, event-driven network application framework.  ...)
-	TODO: check
+	- netty <unfixed>
+	NOTE: https://github.com/netty/netty/security/advisories/GHSA-4mp9-239f-g9hg
 CVE-2026-59247 (Insufficient Verification of Data Authenticity vulnerability in Gleam  ...)
 	TODO: check
 CVE-2026-59243 (The FAB auth manager's Azure AD OAuth login defaulted `verify_signatur ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/52452fd6867f2bb489f3fc7aa3a085694a3407fd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/52452fd6867f2bb489f3fc7aa3a085694a3407fd
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260729/527e0f2a/attachment.htm>