[Git][security-tracker-team/security-tracker][master] new gcc issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d3d4aa92 by Moritz Muehlenhoff at 2026-11-01T20:40:47+01:00
new gcc issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1388,7 +1388,17 @@ CVE-2026-115604 (Subscriber Arbitrary File Deletion in SureDash <= 1.12.3 versio
 CVE-2026-115456 (A flaw was found in gcc. An attacker could cause a Denial of Service ( ...)
 	TODO: check
 CVE-2026-115455 (A flaw was found in GCC libstdc++. When an application extracts data i ...)
-	TODO: check
+	- gcc-16 <unfixed>
+	- gcc-15 <unfixed>
+	- gcc-14 <unfixed>
+	[trixie] - gcc-14 <no-dsa> (Minor issue)
+	- gcc-13 <unfixed>
+	[trixie] - gcc-13 <no-dsa> (Minor issue)
+	- gcc-12 <unfixed>
+	[trixie] - gcc-12 <no-dsa> (Minor issue)
+	- gcc-11 <unfixed>
+	NOTE: https://gcc.gnu.org/cgit/gcc/commit/?id=5d419c69ce2e6b86d7da75f18736904885674219
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2562933
 CVE-2026-115346 (The Avada | Website Builder For WordPress & WooCommerce theme for Word ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-115274 (Improper Validation of Specified Quantity in Input vulnerability in th ...)
@@ -1396,9 +1406,29 @@ CVE-2026-115274 (Improper Validation of Specified Quantity in Input vulnerabilit
 CVE-2026-114711 (Subscriber Cross Site Scripting (XSS) in MultiVendorX <= 5.0.20 versio ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-114691 (A flaw was found in the libstdc++ component of GCC. An attacker who ca ...)
-	TODO: check
+	- gcc-16 <unfixed>
+	- gcc-15 <unfixed>
+	- gcc-14 <unfixed>
+	[trixie] - gcc-14 <no-dsa> (Minor issue)
+	- gcc-13 <unfixed>
+	[trixie] - gcc-13 <no-dsa> (Minor issue)
+	- gcc-12 <unfixed>
+	[trixie] - gcc-12 <no-dsa> (Minor issue)
+	- gcc-11 <unfixed>
+	NOTE: https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=2fd8866591b5aea7098835f80ab7e176382175ae
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2478508
 CVE-2026-114690 (A flaw was found in GCC. An out-of-bounds memory access vulnerability  ...)
-	TODO: check
+	- gcc-16 <unfixed>
+	- gcc-15 <unfixed>
+	- gcc-14 <unfixed>
+	[trixie] - gcc-14 <no-dsa> (Minor issue)
+	- gcc-13 <unfixed>
+	[trixie] - gcc-13 <no-dsa> (Minor issue)
+	- gcc-12 <unfixed>
+	[trixie] - gcc-12 <no-dsa> (Minor issue)
+	- gcc-11 <unfixed>
+	NOTE: https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=c1f32b67510f6f9998deadaef5090b6663adb979 (main)
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2478652
 CVE-2026-112905 (Vvveb is a powerful and easy to use CMS with page builder to build web ...)
 	NOT-FOR-US: Vvveb
 CVE-2026-112816 (Improper certificate validation in the HTTPS listener in Canonical LXD ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d3d4aa9262e46964ba8accc0936b547c2e780ca4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d3d4aa9262e46964ba8accc0936b547c2e780ca4
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261101/23447914/attachment.htm>