[Git][security-tracker-team/security-tracker][master] CVE-2026-3312/pagure: bullseye postponed
Sylvain Beucler (@beuc)
gitlab at salsa.debian.org
Tue Mar 24 10:08:50 GMT 2026
Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker
Commits:
8ab39386 by Sylvain Beucler at 2026-03-24T11:08:23+01:00
CVE-2026-3312/pagure: bullseye postponed
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3081,6 +3081,7 @@ CVE-2025-14031 (IBM Sterling B2B Integrator andand IBM Sterling File Gateway6.1.
NOT-FOR-US: IBM
CVE-2026-3312
- pagure <unfixed>
+ [bullseye] - pagure <postponed> (Minor issue, infoleak)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2443259
CVE-2025-71276 (SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, ...)
- sogo <unfixed> (bug #1131605)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8ab39386f14a1a9445d75bc4c75f0601b1e476ad
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8ab39386f14a1a9445d75bc4c75f0601b1e476ad
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260324/d1514011/attachment.htm>
More information about the debian-security-tracker-commits
mailing list