[Git][security-tracker-team/security-tracker][master] Reference directly commit for CVE-2026-44742/postorius

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sat May 9 15:25:45 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9ed996cf by Salvatore Bonaccorso at 2026-05-09T16:24:41+02:00
Reference directly commit for CVE-2026-44742/postorius

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1965,7 +1965,7 @@ CVE-2026-5784 (Improper neutralization of input during web page generation ('cro
 CVE-2026-44742 (Postorius through 1.3.13 does not escape HTML in the message subject w ...)
 	{DSA-6257-1}
 	- postorius <unfixed> (bug #1136003)
-	NOTE: https://gitlab.com/mailman/postorius/-/commit/c4706abd05ba6bcf472fc674b160d3a9d6a4868b
+	NOTE: https://gitlab.com/mailman/postorius/-/commit/8d00a3c317729f37435bdbd27170f630e341f29e
 	NOTE: https://gitlab.com/mailman/postorius/-/merge_requests/972
 CVE-2026-44407 (A remote denial-of-service vulnerability exists in the ZTE Cloud PC cl ...)
 	NOT-FOR-US: ZTE



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9ed996cf99d80228acee22695e1a96ff33f5ce24

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9ed996cf99d80228acee22695e1a96ff33f5ce24
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260509/e9c56abc/attachment.htm>


More information about the debian-security-tracker-commits mailing list