[Git][security-tracker-team/security-tracker][master] Reference upstream advisories for CVE-2026-8624{3,6}
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Thu Oct 1 13:58:33 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
d00f3044 by Salvatore Bonaccorso at 2026-10-01T14:57:50+02:00
Reference upstream advisories for CVE-2026-8624{3,6}
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -10195,13 +10195,13 @@ CVE-2026-86246 (Initialization of a resource with an insecure default vulnerabil
[trixie] - tomcat-native <no-dsa> (Minor issue)
NOTE: Fixed by: https://github.com/apache/tomcat-native/commit/f6bb04b28f234a35c21a2997963195ae1d86de69 (2.0.16)
NOTE: Fixed by: https://github.com/apache/tomcat-native/commit/77a87991079211805f41ddb2c51067bb807dcb40 (1.3.9)
- NOTE: https://www.openwall.com/lists/oss-security/2026/09/23/32
+ NOTE: https://lists.apache.org/thread/dgyvfwb24nbk45ptvlhdyhdhl5o7k5ol
CVE-2026-86243 (Buffer over-read vulnerability in Apache Tomcat Native during the TLS ...)
- tomcat-native 2.0.16-1
[trixie] - tomcat-native <no-dsa> (Minor issue)
NOTE: Fixed by: https://github.com/apache/tomcat-native/commit/9a7c804afc05fdc630520eb4012ce1c4ff787862 (2.0.16)
NOTE: Fixed by: https://github.com/apache/tomcat-native/commit/ce019af0db385dfd5bc7c7a759f71602559a0499 (1.3.9)
- NOTE: https://www.openwall.com/lists/oss-security/2026/09/23/31
+ NOTE: https://lists.apache.org/thread/8p4jf02w54m22x0cwpq2x53w3ov8o557
CVE-2026-94422
{DSA-6510-1}
- xdg-dbus-proxy 0.1.9-1 (bug #1148782)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d00f30448a260c2b87d8e4a8cf74f52a60dd56bd
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d00f30448a260c2b87d8e4a8cf74f52a60dd56bd
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261001/fc59b552/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list