[Git][security-tracker-team/security-tracker][master] Add new issues in peazip

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f4a9b4e5 by Salvatore Bonaccorso at 2026-10-03T10:17:10+02:00
Add new issues in peazip

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -152,7 +152,7 @@ CVE-2026-105080 (In ConvertX before 0.19.0, converters/calibre.ts does not block
 CVE-2026-105051 (Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor pr ...)
 	TODO: check
 CVE-2026-105050 (PeaZip before 11.3.0, in a non-default configuration, is vulnerable to ...)
-	TODO: check
+	- peazip <itp> (bug #1119684)
 CVE-2026-105049 (Zilliz Attu before 3.0.0 has a Playground feature that does not requir ...)
 	TODO: check
 CVE-2026-105048 (The Playground feature of Zilliz Attu before 3.0.0 allows SSRF (proxyi ...)
@@ -303254,7 +303254,7 @@ CVE-2025-33028 (In WinZip through 29.0, there is a Mark-of-the-Web Bypass Vulner
 CVE-2025-33027 (In Bandisoft Bandizip through 7.37, there is a Mark-of-the-Web Bypass  ...)
 	NOT-FOR-US: Bandisoft Bandizip
 CVE-2025-33026 (In PeaZip through 10.4.0, there is a Mark-of-the-Web Bypass Vulnerabil ...)
-	NOT-FOR-US: PeaZip
+	- peazip <itp> (bug #1119684)
 CVE-2025-32949 (This vulnerability allows any authenticated user to cause the server t ...)
 	- peertube <itp> (bug #950821)
 CVE-2025-32948 (The vulnerability allows any attacker to cause the PeerTube server to  ...)
@@ -442595,7 +442595,7 @@ CVE-2023-6894 (A vulnerability was found in Hikvision Intercom Broadcasting Syst
 CVE-2023-6893 (A vulnerability was found in Hikvision Intercom Broadcasting System 3. ...)
 	NOT-FOR-US: Hikvision Intercom Broadcasting System
 CVE-2023-6891 (A vulnerability has been found in PeaZip 9.4.0 and classified as probl ...)
-	NOT-FOR-US: PeaZip
+	- peazip <itp> (bug #1119684)
 CVE-2023-6888 (A vulnerability classified as critical was found in PHZ76 RtspServer 1 ...)
 	NOT-FOR-US: PHZ76 RtspServer
 CVE-2023-6887 (A vulnerability classified as critical has been found in saysky Forest ...)
@@ -1056085,7 +1056085,7 @@ CVE-2009-2263 (Directory traversal vulnerability in index.php in Awesome PHP Meg
 CVE-2009-2262 (PHP remote file inclusion vulnerability in install/di.php in AjaxPorta ...)
 	NOT-FOR-US: AjaxPortal
 CVE-2009-2261 (PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remot ...)
-	NOT-FOR-US: PeaZIP
+	- peazip <itp> (bug #1119684)
 CVE-2009-2260 (stardict 3.0.1, when Enable Net Dict is configured, sends the contents ...)
 	- stardict 3.0.1-5 (low; bug #534731)
 	[etch] - stardict <not-affected> (netdict plugin not yet present)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f4a9b4e5efa46bfb6e177d4da80b7b9bb0be3224

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f4a9b4e5efa46bfb6e177d4da80b7b9bb0be3224
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261003/b50df101/attachment.htm>