[Git][security-tracker-team/security-tracker][master] Add CVE-2026-55202/tinyproxy

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7f5cdc42 by Salvatore Bonaccorso at 2026-06-18T10:36:21+02:00
Add CVE-2026-55202/tinyproxy

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -9,7 +9,9 @@ CVE-2026-8049 (In SignalRGB versions prior to 1.3.7.0, the \\.\SignalIo device o
 CVE-2026-55740 (Nur-Alam39 bus-ticket (no released versions; latest commit 459cabdbeb9 ...)
 	NOT-FOR-US: Nur-Alam39 bus-ticket
 CVE-2026-55202 (Tinyproxy through 1.11.3, fixed in commit 09312a1, fails to properly v ...)
-	TODO: check
+	- tinyproxy <unfixed>
+	NOTE: https://github.com/tinyproxy/tinyproxy/pull/606
+	NOTE: https://github.com/tinyproxy/tinyproxy/commit/09312a185ae25cc486b4ff5987638a7917a48bce
 CVE-2026-55201 (Evil-WinRM through 3.9, fixed in commit 6ecd570, contains a path trave ...)
 	NOT-FOR-US: Evil-WinRM
 CVE-2026-55200 (libssh2 through 1.11.1, fixed in commit 7acf3df contains an out-of-bou ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7f5cdc42da545b1db2efd1967fb7afbdecea9bf1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7f5cdc42da545b1db2efd1967fb7afbdecea9bf1
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260618/79580fc5/attachment-0001.htm>