[Git][security-tracker-team/security-tracker][master] Add new RT5 issue

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ad002a80 by Salvatore Bonaccorso at 2026-05-20T20:47:54+02:00
Add new RT5 issue

I'm adding to do a first tracking as well request-tracker4, but this has
not been assessed if it has an impact there. Maintainers of RT
contacted.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,35 @@
+CVE-2026-41073
+	- request-tracker5 <unfixed>
+	- request-tracker4 <unfixed>
+	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.10
+CVE-2026-44229
+	- request-tracker5 <unfixed>
+	- request-tracker4 <unfixed>
+	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.10
+CVE-2026-44230
+	- request-tracker5 <unfixed>
+	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.10
+	TODO: should not affect 5.0.3 in bookworm, check
+CVE-2026-44227
+	- request-tracker5 <unfixed>
+	- request-tracker4 <unfixed>
+	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.10
+CVE-2026-6841
+	- request-tracker5 <unfixed>
+	- request-tracker4 <unfixed>
+	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.10
+CVE-2026-41076
+	- request-tracker5 <unfixed>
+	- request-tracker4 <unfixed>
+	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.10
+CVE-2026-41075
+	- request-tracker5 <unfixed>
+	- request-tracker4 <unfixed>
+	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.10
+CVE-2026-44231
+	- request-tracker5 <unfixed>
+	- request-tracker4 <unfixed>
+	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.10
 CVE-2026-XXXX [RUSTSEC-2026-0145]
 	- rust-astral-tokio-tar 0.6.2-1
 	NOTE: https://rustsec.org/advisories/RUSTSEC-2026-0145.html



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ad002a8063edfe6fb81a98b5c5df4c8f4f84e732

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ad002a8063edfe6fb81a98b5c5df4c8f4f84e732
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260520/be289e44/attachment.htm>