[Git][security-tracker-team/security-tracker][master] Add new issues in optee-os
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Jun 3 21:16:09 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
29f3be2b by Salvatore Bonaccorso at 2026-06-03T22:15:36+02:00
Add new issues in optee-os
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -30,9 +30,11 @@ CVE-2026-47324 (ProjectsAndPrograms school-management-system is vulnerable to St
CVE-2026-47065 (ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter By ...)
TODO: check
CVE-2026-45702 (OP-TEE is a Trusted Execution Environment (TEE) designed as companion ...)
- TODO: check
+ - optee-os <unfixed>
+ NOTE: https://github.com/OP-TEE/optee_os/security/advisories/GHSA-86pj-8xgw-66p5
CVE-2026-45614 (OP-TEE is a Trusted Execution Environment (TEE) designed as companion ...)
- TODO: check
+ - optee-os <unfixed>
+ NOTE: https://github.com/OP-TEE/optee_os/security/advisories/GHSA-g6qf-hwf7-mg9h
CVE-2026-44546 (daphne before 4.2.2 reconstructs a raw HTTP request from Twisted's par ...)
- python-daphne <unfixed>
TODO: check upstream commits in 4.2.2
@@ -56,7 +58,8 @@ CVE-2026-42317 (GLPI is a free asset and IT management software package. Startin
CVE-2026-41032 (It is possible for an unauthenticated adjacent attacker to download lo ...)
TODO: check
CVE-2026-40290 (OP-TEE is a Trusted Execution Environment (TEE) designed as companion ...)
- TODO: check
+ - optee-os <unfixed>
+ NOTE: https://github.com/OP-TEE/optee_os/security/advisories/GHSA-332c-xr93-849m
CVE-2026-39107 (A Cross Site Scripting vulnerability exists in the Kimi AI v1.0 web in ...)
TODO: check
CVE-2026-37462 (An integer underflow in the BGPUpdate.DecodeFromBytes function (/bgp/b ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/29f3be2b91d7d53dda16d57a4d21c0e304ca1bae
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/29f3be2b91d7d53dda16d57a4d21c0e304ca1bae
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260603/38168860/attachment.htm>
More information about the debian-security-tracker-commits
mailing list