[Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sat Oct 3 22:19:22 BST 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
464de2fe by Salvatore Bonaccorso at 2026-10-03T23:18:42+02:00
Add Debian bug references for various issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -964,16 +964,16 @@ CVE-2026-103957 (Server-side request forgery in the OAuth2 discovery handling in
 CVE-2026-103956 (Missing authentication for critical function in the authentication dep ...)
 	NOT-FOR-US: Amazon
 CVE-2026-103885 (Asymmetric Resource Consumptionvulnerability in Apache Directory LDAP  ...)
-	- apache-directory-api <unfixed>
+	- apache-directory-api <unfixed> (bug #1149877)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/10/02/8
 CVE-2026-103880 (Asymmetric Resource Consumptionvulnerability in Apache Directory LDAP  ...)
-	- apache-directory-api <unfixed>
+	- apache-directory-api <unfixed> (bug #1149877)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/10/02/7
 CVE-2026-103878 (Cleartext transmission of sensitive informationvulnerability in Apache ...)
-	- apache-directory-api <unfixed>
+	- apache-directory-api <unfixed> (bug #1149877)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/10/02/6
 CVE-2026-103877 (Deserialization of Untrusted Data vulnerability in Apache Directory LD ...)
-	- apache-directory-api <unfixed>
+	- apache-directory-api <unfixed> (bug #1149877)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/10/02/5
 CVE-2026-103763 (SiYuan before v3.8.5 contains an information disclosure vulnerability  ...)
 	NOT-FOR-US: SiYuan
@@ -1014,7 +1014,7 @@ CVE-2026-103601 (Release of unverified plaintext in the CCM (CcmBlockCipher) and
 CVE-2026-103600 (Uncontrolled recursion in the ASN.1 parser (Asn1InputStream, Asn1Strea ...)
 	NOT-FOR-US: Bouncycastle components not packaged in Debian
 CVE-2026-103552 (Stack Overflow vulnerability in Apache Directory LDAP API.    Before b ...)
-	- apache-directory-api <unfixed>
+	- apache-directory-api <unfixed> (bug #1149877)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/10/02/4
 CVE-2026-103426 (The Relevanssi Premium plugin for WordPress is vulnerable to Stored Cr ...)
 	NOT-FOR-US: WordPress plugin
@@ -1028,7 +1028,7 @@ CVE-2026-102795 (Improper Access Control vulnerability in Apache Traffic Server.
 CVE-2026-102772 (The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scrip ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-102731 (Memory allocation with excessive size value vulnerability in Apache Di ...)
-	- apache-directory-api <unfixed>
+	- apache-directory-api <unfixed> (bug #1149877)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/10/02/3
 CVE-2026-102626 (An authenticated LimeSurvey Community Edition 7.4.0user with the globa ...)
 	- limesurvey <itp> (bug #472802)
@@ -6834,22 +6834,22 @@ CVE-2026-101858 (A flaw has been found in RaspAP raspap-webgui up to 3.5.5. Affe
 CVE-2026-101354 (A security flaw has been discovered in FAST FAC1203R 20200116_2.0.4. T ...)
 	NOT-FOR-US: FAST FAC1203R
 CVE-2026-101281 (A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. ...)
-	- opendmarc <unfixed>
+	- opendmarc <unfixed> (bug #1149876)
 	NOTE: https://github.com/trusteddomainproject/OpenDMARC/issues/262
 	NOTE: https://github.com/trusteddomainproject/OpenDMARC/pull/328
 	NOTE: Fixed by: https://github.com/trusteddomainproject/OpenDMARC/commit/a9a87bdedbf886f5f1e7a6ddce465cb4626d337d
 	NOTE: https://xuyongzhe-vt.github.io/share/opendmarc-spf-postmaster-macro.html
 CVE-2026-101280 (A vulnerability was detected in Trusted Domain Project OpenDMARC up to ...)
-	- opendmarc <unfixed>
+	- opendmarc <unfixed> (bug #1149876)
 	NOTE: https://xuyongzhe-vt.github.io/share/opendmarc-multi-record-downgrade.html
 CVE-2026-101279 (A security vulnerability has been detected in Trusted Domain Project O ...)
-	- opendmarc <unfixed>
+	- opendmarc <unfixed> (bug #1149876)
 	NOTE: https://xuyongzhe-vt.github.io/share/dmarc-pct-integer-handling.html
 CVE-2026-101278 (A weakness has been identified in Trusted Domain Project OpenDMARC up  ...)
-	- opendmarc <unfixed>
+	- opendmarc <unfixed> (bug #1149876)
 	NOTE: https://xuyongzhe-vt.github.io/share/opendmarc-psl-wildcard-orgdomain.html
 CVE-2026-101277 (A security flaw has been discovered in Trusted Domain Project OpenDKIM ...)
-	- opendkim <unfixed>
+	- opendkim <unfixed> (bug #1149875)
 	NOTE: https://xuyongzhe-vt.github.io/share/opendkim-tag-parser-desync.html
 CVE-2026-101265 (A vulnerability was identified in Intelbras TIP 125i 4.3.35/4.3.41. Th ...)
 	NOT-FOR-US: Intelbras
@@ -7425,16 +7425,16 @@ CVE-2026-101035 (A flaw has been found in aligungr UERANSIM up to 3.3.0. This af
 CVE-2026-101018 (A vulnerability was determined in dayrui XunruiCMS up to 4.7.2. This i ...)
 	NOT-FOR-US: dayrui XunruiCMS
 CVE-2026-101017 (A vulnerability was found in Trusted Domain Project OpenDMARC up to 1. ...)
-	- opendmarc <unfixed>
+	- opendmarc <unfixed> (bug #1149876)
 	NOTE: https://xuyongzhe-vt.github.io/share/opendmarc-subdomain-walk-abort.html
 CVE-2026-101016 (A vulnerability has been found in Trusted Domain Project OpenDMARC up  ...)
-	- opendmarc <unfixed>
+	- opendmarc <unfixed> (bug #1149876)
 	NOTE: https://xuyongzhe-vt.github.io/share/opendmarc-bad-tag-drops-policy.html
 CVE-2026-101015 (A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. ...)
-	- opendmarc <unfixed>
+	- opendmarc <unfixed> (bug #1149876)
 	NOTE: https://weitongli.com/share/opendmarc-unicode-dot-bypass.html
 CVE-2026-101014 (A vulnerability was detected in Trusted Domain Project OpenDMARC up to ...)
-	- opendmarc <unfixed>
+	- opendmarc <unfixed> (bug #1149876)
 	NOTE: https://weitongli.com/share/opendmarc-cleanup-off-by-one.html
 	NOTE: https://github.com/trusteddomainproject/OpenDMARC/pull/188
 	NOTE: https://github.com/trusteddomainproject/OpenDMARC/pull/344
@@ -7621,19 +7621,19 @@ CVE-2026-100893 (A vulnerability was determined in Privoce VoceChat Server up to
 CVE-2026-100892 (A vulnerability was found in aligungr UERANSIM up to 3.3.0. This affec ...)
 	NOT-FOR-US: aligungr UERANSIM
 CVE-2026-100891 (A vulnerability has been found in Trusted Domain Project OpenDMARC up  ...)
-	- opendmarc <unfixed>
+	- opendmarc <unfixed> (bug #1149876)
 	NOTE: https://weitongli.com/share/opendmarc-ulabel-not-converted.html
 	TODO: check upstream details
 CVE-2026-100890 (A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. ...)
-	- opendmarc <unfixed>
+	- opendmarc <unfixed> (bug #1149876)
 	NOTE: https://weitongli.com/share/opendmarc-ip6-wild-pointer.html
 	TODO: check upstream details
 CVE-2026-100889 (A vulnerability was detected in Trusted Domain Project OpenDKIM up to  ...)
-	- opendkim <unfixed>
+	- opendkim <unfixed> (bug #1149875)
 	NOTE: https://weitongli.com/share/opendkim-qp-off-by-one.html
 	TODO: check upstream details
 CVE-2026-100888 (A weakness has been identified in Trusted Domain Project OpenDKIM up t ...)
-	- opendkim <unfixed>
+	- opendkim <unfixed> (bug #1149875)
 	NOTE: https://weitongli.com/share/opendkim-h-tag-oob-write.html
 	TODO: check upstream details
 CVE-2026-100887 (A security flaw has been discovered in amirsanni Mini-Inventory-and-Sa ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/464de2fe53b72f162372b2f017c31958a4ebef5c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/464de2fe53b72f162372b2f017c31958a4ebef5c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261003/e1baeff1/attachment.htm>

More information about the debian-security-tracker-commits mailing list