[Git][security-tracker-team/security-tracker][master] Add new freedombox issue

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
11cf24a6 by Salvatore Bonaccorso at 2026-11-03T07:57:50+01:00
Add new freedombox issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,8 @@
+CVE-2026-XXXX [ssh: Read/write authorized keys file using user account privileges]
+	- freedombox 26.15
+	NOTE: https://alioth-lists.debian.net/pipermail/freedombox-discuss/2026-November/010041.html
+	NOTE: Requisite: https://salsa.debian.org/freedombox-team/freedombox/-/commit/0120ea0e558364c98e51abcb6191d1f3e64abd01 (debian/26.15)
+	NOTE: Fixed by: https://salsa.debian.org/freedombox-team/freedombox/-/commit/351b6a5c9b432f29ecab2a74d5426977bca29188 (debian/26.15)
 CVE-2026-99242 [ntfs: fix race between fallocate and mmap reads]
 	- linux 7.2.14-1
 	[trixie] - linux <not-affected> (Vulnerable code not present)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/11cf24a6dbc2ebd9ca72c133ec2de5adfbd1fb04

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/11cf24a6dbc2ebd9ca72c133ec2de5adfbd1fb04
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261103/2ff55e1e/attachment.htm>