[Git][security-tracker-team/security-tracker][master] bugnums

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ae074817 by Moritz Muehlenhoff at 2026-11-01T21:11:28+01:00
bugnums

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3149,7 +3149,7 @@ CVE-2025-12523 (Broken Object Level Authorization in Users Configuration Endpoin
 CVE-2023-7357 (A remote code execution (RCE) vulnerability was identified in the Flex ...)
 	NOT-FOR-US: Flexera
 CVE-2019-25781 (Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity  ...)
-	- python-markdown <unfixed>
+	- python-markdown <unfixed> (bug #1152830)
 	[trixie] - python-markdown <postponed> (Minor issue, revisit when fixed upstream)
 	NOTE: https://github.com/Python-Markdown/markdown/issues/798
 	NOTE: https://github.com/Python-Markdown/markdown/issues/1654
@@ -8088,12 +8088,12 @@ CVE-2026-116732 (libdwarf through 2.3.3 contains a heap out-of-bounds read vulne
 	NOTE: https://github.com/davea42/libdwarf-code/commit/71f04013ddc2a3c88b9e25a4162ee2824741b593
 	NOTE: Negligible security impact
 CVE-2026-116731 (Furnace through 0.6.8.3 contains an out-of-bounds write vulnerability  ...)
-	- furnace <unfixed>
+	- furnace <unfixed> (bug #1152831)
 	[trixie] - furnace <no-dsa> (Minor issue)
 	NOTE: https://github.com/tildearrow/furnace/issues/2966
 	NOTE: https://github.com/tildearrow/furnace/commit/c120c72391e3229fe258e5759f43427febcb8693
 CVE-2026-116730 (Furnace through 0.6.8.3 contains an out-of-bounds heap read vulnerabil ...)
-	- furnace <unfixed> (unimportant)
+	- furnace <unfixed> (bug #1152831; unimportant)
 	NOTE: https://github.com/tildearrow/furnace/issues/2966
 	NOTE: https://github.com/tildearrow/furnace/commit/c120c72391e3229fe258e5759f43427febcb8693
 	NOTE: Crash in GUI tool, no security impact



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ae0748179c3c9716913fa89142442bb4b1f464d7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ae0748179c3c9716913fa89142442bb4b1f464d7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261101/cb6fcfb9/attachment.htm>