[Git][security-tracker-team/security-tracker][master] Add two new spice-vdagent issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f6955f97 by Salvatore Bonaccorso at 2026-06-29T21:28:51+02:00
Add two new spice-vdagent issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -7,9 +7,11 @@ CVE-2026-58000 (luci-proto-openvpn through 0.11.1, fixed in commit e4ff45e, cont
 CVE-2026-57999 (luci-app-tailscale-community contains a command injection vulnerabilit ...)
 	NOT-FOR-US: luci-app-tailscale-community
 CVE-2026-57966 (A path traversal vulnerability was found in spice-vdagent. This flaw a ...)
-	TODO: check
+	- spice-vdagent <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2493582
 CVE-2026-57965 (A flaw was found in spice-vdagent. A malicious or compromised SPICE ho ...)
-	TODO: check
+	- spice-vdagent <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2493581
 CVE-2026-57960 (Hi.Events through 1.9.0 public check-in list endpoints use short_id as ...)
 	TODO: check
 CVE-2026-57959 (Hi.Events through 1.9.0 contains a promo code validation vulnerability ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f6955f9780c70c3f3399742bdb7907a1672661b8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f6955f9780c70c3f3399742bdb7907a1672661b8
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260629/3629b8f6/attachment-0001.htm>