[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for various issues
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Nov 4 21:32:05 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
1d9d773a by Salvatore Bonaccorso at 2026-11-04T22:30:43+01:00
Add Debian bug reference for various issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -281,19 +281,19 @@ CVE-2026-100252 (Improper Authorization vulnerability in Apache ZooKeeper. When
CVE-2026-100235 (Incorrect authorization due to a time-of-check to time-of-use (TOCTOU) ...)
TODO: check
CVE-2026-121009 (SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl skip t ...)
- - libsql-abstract-perl <unfixed>
+ - libsql-abstract-perl <unfixed> (bug #1153058)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44887029/
NOTE: Fixed by: https://github.com/dbsrgits/sql-abstract/commit/b6e7d991ac588b937e8943a5b28b6837ff276a51 (v2.000001_04)
CVE-2026-121008 (SQL::Abstract::Tree versions before 2.000001_04 for Perl allow cross-s ...)
- - libsql-abstract-perl <unfixed>
+ - libsql-abstract-perl <unfixed> (bug #1153058)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44887025/
NOTE: Fixed by: https://github.com/dbsrgits/sql-abstract/commit/85a75fcde3e09da5181dee07a4eccba76ad94305 (v2.000001_04)
CVE-2026-121007 (SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl allow ...)
- - libsql-abstract-perl <unfixed>
+ - libsql-abstract-perl <unfixed> (bug #1153058)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44887027/
NOTE: Fixed by: https://github.com/dbsrgits/sql-abstract/commit/79fc34e874b4edb441154eccddb04c57d5c1c90e (v2.000001_04)
CVE-2026-114627 (Web::Simple versions before 0.036 for Perl do not escape values interp ...)
- - libweb-simple-perl <unfixed>
+ - libweb-simple-perl <unfixed> (bug #1153059)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44886751/
NOTE: Fixed by: https://github.com/p5sagit/Web-Simple/commit/01e575827fdd9ba3a08063fd414b1de465380015 (v0.036)
CVE-2026-121632 (Data::MuForm versions through 0.05 for Perl render attribute values an ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1d9d773ae74dad90da9160d7343522a9611cfb9e
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1d9d773ae74dad90da9160d7343522a9611cfb9e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261104/7033cbcc/attachment.htm>
More information about the debian-security-tracker-commits
mailing list