[Git][security-tracker-team/security-tracker][master] Add CVE-2026-28384/incus

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e307c4f0 by Salvatore Bonaccorso at 2026-03-16T19:06:21+01:00
Add CVE-2026-28384/incus

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1101,7 +1101,11 @@ CVE-2026-28792 (Tina is a headless content management system. Prior to 2.1.8 , t
 CVE-2026-28791 (Tina is a headless content management system. Prior to 2.1.7, a path t ...)
 	NOT-FOR-US: Tina CMS (different from src:tina)
 CVE-2026-28384 (An improper sanitization of the compression_algorithm parameter in Can ...)
-	TODO: check
+	- incus 6.0.6-1
+	- lxd <removed>
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-x6jc-phwx-hp32
+	NOTE: https://github.com/canonical/lxd/pull/17820
+	NOTE: https://github.com/lxc/incus/pull/2972
 CVE-2026-28256 (A Use of Hard-coded, Security-relevant Constants vulnerability in Tran ...)
 	NOT-FOR-US: Trane Tracer
 CVE-2026-28255 (A Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Trac ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e307c4f0b2792633e8b3d36c3dfc2798977c62ba

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e307c4f0b2792633e8b3d36c3dfc2798977c62ba
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260316/8a656ef1/attachment.htm>