[Git][security-tracker-team/security-tracker][master] Add CVE-2026-59247/gleam, itp'ed

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Jul 29 22:01:53 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
94c3d913 by Salvatore Bonaccorso at 2026-07-29T23:01:33+02:00
Add CVE-2026-59247/gleam, itp'ed

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -139,7 +139,7 @@ CVE-2026-59898 (Netty is an asynchronous, event-driven network application frame
 	- netty <unfixed>
 	NOTE: https://github.com/netty/netty/security/advisories/GHSA-4mp9-239f-g9hg
 CVE-2026-59247 (Insufficient Verification of Data Authenticity vulnerability in Gleam  ...)
-	TODO: check
+	- gleam <itp> (bug #1103795)
 CVE-2026-59243 (The FAB auth manager's Azure AD OAuth login defaulted `verify_signatur ...)
 	NOT-FOR-US: Apache Airflow FAB provider
 CVE-2026-58189 (Apache Traffic Server allows redirect-limit bypass when plugins reset  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/94c3d913a14452ef0347b48809323f21d3b21f0b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/94c3d913a14452ef0347b48809323f21d3b21f0b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260729/fbc08f8d/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list