[Git][security-tracker-team/security-tracker][master] CVE-2026-79616: Add commit reference in v6.11.2

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
53c1f99b by Salvatore Bonaccorso at 2026-10-01T14:39:51+02:00
CVE-2026-79616: Add commit reference in v6.11.2

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -9700,7 +9700,7 @@ CVE-2026-79616 (Out-of-bounds read while parsing untrusted SVG path strings in Q
 	- qtdeclarative-opensource-src <unfixed>
 	[trixie] - qtdeclarative-opensource-src <no-dsa> (Minor issue)
 	NOTE: https://codereview.qt-project.org/c/qt/qtdeclarative/+/754718
-	NOTE: https://github.com/qt/qtdeclarative/commit/0aba8c7674dbbbaaa142775247249e297a339c85
+	NOTE: https://github.com/qt/qtdeclarative/commit/34a90737c73d5fb9043367fdf944a553f82f9053 (v6.11.2)
 CVE-2026-79310 (webpy web.py 0.76 is vulnerable to server-side template injection (SST ...)
 	- web2py <unfixed>
 	[trixie] - web2py <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/53c1f99b719268ad01ac51e0c4b8cf9ab5314fa7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/53c1f99b719268ad01ac51e0c4b8cf9ab5314fa7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261001/46288f31/attachment.htm>