[Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d27735a6 by Salvatore Bonaccorso at 2026-10-02T21:02:22+02:00
Add Debian bug references for various issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -339,10 +339,10 @@ CVE-2026-94603
 	- podman <unfixed>
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2542566
 CVE-2026-86345 (A flaw was found in 389-ds-base. The server does not discard plaintext ...)
-	- 389-ds-base <unfixed>
+	- 389-ds-base <unfixed> (bug #1149731)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2529332
 CVE-2026-86344 (A flaw was found in 389-ds-base. An unauthenticated remote attacker ca ...)
-	- 389-ds-base <unfixed>
+	- 389-ds-base <unfixed> (bug #1149732)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2529329
 	TODO: check, not details provided on 2026-10-02 in Red Hat bugzilla
 CVE-2026-9864 (Fortra BoKS Server Agent contains a predictable password generation vu ...)
@@ -7691,13 +7691,13 @@ CVE-2026-95866 (The User Profile Builder \u2013 Beautiful User Registration Form
 CVE-2026-95864 (The Themify Builder plugin for WordPress is vulnerable to Stored Cross ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-95835 (Missing Authorization in the askpass escape code handler in kitty from ...)
-	- kitty <unfixed>
+	- kitty <unfixed> (bug #1149729)
 	NOTE: Fixed by: https://github.com/kovidgoyal/kitty/commit/3281919056c442e4ba6f5abed7ee2c5130de31ff (v0.49.0)
 CVE-2026-95834 (Use After Free in the drag source path of the drag and drop protocol i ...)
-	- kitty <unfixed>
+	- kitty <unfixed> (bug #1149729)
 	NOTE: Fixed by: https://github.com/kovidgoyal/kitty/commit/b54bfbb4f85f992edca9b04f5c0c2612454eec23 (v0.49.0)
 CVE-2026-95832 (Improper Neutralization of Special Elements in Output Used by a Downst ...)
-	- kitty <unfixed>
+	- kitty <unfixed> (bug #1149729)
 	NOTE: Fixed by: https://github.com/kovidgoyal/kitty/commit/03fbdad855490470233954bc810e517027e5e640 (0.49.0)
 	NOTE: Fixed by: https://github.com/kovidgoyal/kitty/commit/57bb144d96c0f9d48a2b0a6d43c9a23d2a091cbf (0.49.0)
 CVE-2026-95699 (Prior to 9/18/2026, the iSteamX mobile application's AWS policy could  ...)
@@ -7901,13 +7901,13 @@ CVE-2026-81630 (The Botslab G980H dash camera firmware does not adequately verif
 CVE-2026-80514 (The wpForo Forum WordPress plugin from 3.0.0 before 3.1.6 does not ver ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-80432 (Missing Authorization in the drop handling path of the drag and drop p ...)
-	- kitty <unfixed>
+	- kitty <unfixed> (bug #1149729)
 	NOTE: https://github.com/kovidgoyal/kitty/commit/026d11f517da17bfd3c35ea502057babdfbe5828 (v0.49.0)
 CVE-2026-80431 (Out-of-bounds Write in the natural width branch of the text sizing pro ...)
-	- kitty <unfixed>
+	- kitty <unfixed> (bug #1149729)
 	NOTE: Fixed by: https://github.com/kovidgoyal/kitty/commit/7d2fbaadcc2b1eeeef89bd875ec622b42362574b (v0.49.0)
 CVE-2026-80430 (Improper Link Resolution Before File Access in the drag source staging ...)
-	- kitty <unfixed>
+	- kitty <unfixed> (bug #1149729)
 	NOTE: Fixed by: https://github.com/kovidgoyal/kitty/commit/554908ed0b4d010cf9821c75449c7f7c79a6170a (0.49.0)
 	NOTE: Fixed by: https://github.com/kovidgoyal/kitty/commit/3c3133d3399257492347f535d8d191680803b25d (0.49.0)
 CVE-2026-79959 (The Botslab G980H dash camera firmware contains a hard-coded root acco ...)
@@ -15349,7 +15349,7 @@ CVE-2026-93964 (A vulnerability was detected in NginxProxyManager nginx-proxy-ma
 CVE-2026-93963 (A security vulnerability has been detected in itsourcecode Leave Manag ...)
 	NOT-FOR-US: itsourcecode System
 CVE-2026-93962 (A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2 ...)
-	- kamailio <unfixed>
+	- kamailio <unfixed> (bug #1149730)
 	[trixie] - kamailio <postponed> (Minor issue, fix along with future DSA)
 	NOTE: https://github.com/kamailio/kamailio/issues/4876
 	NOTE: https://github.com/kamailio/kamailio/pull/4877



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d27735a6457c4e093365ef6f147abc54c667f579

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d27735a6457c4e093365ef6f147abc54c667f579
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261002/7ca53b22/attachment-0001.htm>