[Git][security-tracker-team/security-tracker][master] Add two new haproxy issues
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Thu Jun 18 20:40:01 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
143a3b57 by Salvatore Bonaccorso at 2026-06-18T21:39:43+02:00
Add two new haproxy issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -46,9 +46,11 @@ CVE-2026-55237 (AutoGPT is a workflow automation platform for creating, deployin
CVE-2026-55205 (Hermes WebUI before 0.51.468 contains a resource exhaustion vulnerabil ...)
NOT-FOR-US: Hermes WebUI
CVE-2026-55204 (HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null point ...)
- TODO: check
+ - haproxy <unfixed>
+ NOTE: https://github.com/haproxy/haproxy/commit/9a6d1fe3f00d86ab4ea6ea6ea0a5d48fc058a513
CVE-2026-55203 (HAProxy through 3.4.0, fixed in commit 5985276, contains an integer ov ...)
- TODO: check
+ - haproxy <unfixed>
+ NOTE: https://github.com/haproxy/haproxy/commit/5985276735777634d8c85f1d73bb7764aab0d6dd
CVE-2026-54419 (claudiopizzillo PIAF-HMS (PBX-In-A-Flash Hotel Management System; no r ...)
NOT-FOR-US: PBX-In-A-Flash Hotel Management System
CVE-2026-54390 (JTL Shop versions 5.2.0 through 5.7.1 contains a server-side template ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/143a3b57ff401eb4516342be7ce2c60b2ed03806
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/143a3b57ff401eb4516342be7ce2c60b2ed03806
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260618/f881d34e/attachment.htm>
More information about the debian-security-tracker-commits
mailing list