[Git][security-tracker-team/security-tracker][master] new cyborg issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
390008ac by Moritz Muehlenhoff at 2026-05-08T13:22:33+02:00
new cyborg issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -266,9 +266,11 @@ CVE-2026-41498 (Kimai is an open-source time tracking application. Prior to vers
 CVE-2026-41105 (Server-side request forgery (ssrf) in Azure Notification Service allow ...)
 	NOT-FOR-US: Microsoft
 CVE-2026-40214 (In OpenStack Cyborg before 16.0.1, the Accelerator Request (ARQ) API d ...)
-	TODO: check
+	- cyborg <unfixed>
+	NOTE: https://www.openwall.com/lists/oss-security/2026/05/07/6
 CVE-2026-40213 (OpenStack Cyborg before 16.0.1 uses rule:allow (check_str='@') as the  ...)
-	TODO: check
+	- cyborg <unfixed>
+	NOTE: https://www.openwall.com/lists/oss-security/2026/05/07/6
 CVE-2026-3508 (An Out-of-bounds Read vulnerability in the IOCTL handler in ASUS Syste ...)
 	NOT-FOR-US: ASUS
 CVE-2026-39836 (The Dial and LookupPort functions panic on Windows when provided with  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/390008ac476cb0dc1074f89dfbd791cfa81f1aeb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/390008ac476cb0dc1074f89dfbd791cfa81f1aeb
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260508/fabddad0/attachment.htm>