[Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sun Oct 4 20:39:25 BST 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
062abef2 by Salvatore Bonaccorso at 2026-10-04T21:39:15+02:00
Add Debian bug references for various issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -528,7 +528,7 @@ CVE-2026-95670 (The No External Links plugin for WordPress is vulnerable to Stor
 CVE-2026-95662 (Cross-Site Scripting vulnerability in the Repasat application. Success ...)
 	NOT-FOR-US: Repasat
 CVE-2026-95512 (A flaw was found in FreeType, specifically within its CID font loader. ...)
-	- freetype <unfixed>
+	- freetype <unfixed> (bug #1149953)
 	[bookworm] - freetype <postponed> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2462295
 	NOTE: Fixed by: https://gitlab.freedesktop.org/freetype/freetype/-/commit/f3ca71c9900fe860849b3163a6e2c1e765b291d9
@@ -1509,7 +1509,7 @@ CVE-2026-100251 (Wormhole.app as deployed before 2026-08-22 misconfigures the co
 CVE-2025-71427 (Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal v ...)
 	NOT-FOR-US: Office-PowerPoint-MCP-Server
 CVE-2026-94603
-	- podman <unfixed>
+	- podman <unfixed> (bug #1149955)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2542566
 	NOTE: https://github.com/podman-container-tools/podman/security/advisories/GHSA-2cvf-wqm6-wr9g
 	NOTE: Fixed by: https://github.com/podman-container-tools/podman/commit/3721ff82ffb44a4ceeaecc5abd3808e924a6b669 (main)
@@ -4786,7 +4786,7 @@ CVE-2026-103270 (LightLLM through 1.2.0 mounts reinforcement learning control ro
 CVE-2026-103243 (LightLLM through 1.2.0 fails to validate image_url and audio_url param ...)
 	NOT-FOR-US: LightLLM
 CVE-2026-103242 (A heap-based buffer overflow flaw was found in rpm. RPMTAG_FILESIGNATU ...)
-	- rpm <unfixed>
+	- rpm <unfixed> (bug #1149951)
 	[trixie] - rpm <no-dsa> (Minor issue)
 	[bookworm] - rpm <postponed> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2543866
@@ -5613,7 +5613,7 @@ CVE-2026-96429 (SQL Injection in the /WebAgenda/SMBAjaxConfigProcess.do API endp
 CVE-2026-96428 (SQL Injection in the /WebAgenda/SMBAjaxAutoComplete.do API endpoint of ...)
 	NOT-FOR-US: Flowring Agentflow
 CVE-2026-95520 (A heap-based buffer overflow flaw was found in rpm. Parsing a symlink  ...)
-	- rpm <unfixed>
+	- rpm <unfixed> (bug #1149951)
 	[trixie] - rpm <no-dsa> (Minor issue)
 	[bookworm] - rpm <postponed> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2537809
@@ -11385,12 +11385,12 @@ CVE-2026-96515 (This vulnerability exists in the Netlink ICT HG323RW router due
 CVE-2026-95985 (The file write tool in Amazon Kiro IDE versions before 1.0.242 might a ...)
 	NOT-FOR-US: Amazon
 CVE-2026-95521 (A command injection flaw was found in rpm. Installing or rebuilding a  ...)
-	- rpm <unfixed>
+	- rpm <unfixed> (bug #1149951)
 	[trixie] - rpm <no-dsa> (Minor issue)
 	[bookworm] - rpm <postponed> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2537812
 CVE-2026-95519 (A flaw was found in rpm. An attacker can supply a crafted manifest fil ...)
-	- rpm <unfixed>
+	- rpm <unfixed> (bug #1149951)
 	[trixie] - rpm <no-dsa> (Minor issue)
 	[bookworm] - rpm <postponed> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2470977
@@ -11525,7 +11525,7 @@ CVE-2026-88373 (libde265 commit 4d45a6b contains a NULL pointer dereference vuln
 	NOTE: https://github.com/strukturag/libde265/issues/534
 	NOTE: Fixed by: https://github.com/strukturag/libde265/commit/f8d324914e43d92af23614f22959cf9eee7bf9ea (v1.1.2)
 CVE-2026-88372 (libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_re ...)
-	- libsndfile <unfixed>
+	- libsndfile <unfixed> (bug #1149957)
 	[trixie] - libsndfile <postponed> (Minor issue, revisit when fixed upstream)
 	[bookworm] - libsndfile <postponed> (Minor issue)
 	NOTE: https://github.com/libsndfile/libsndfile/issues/1151
@@ -17802,7 +17802,7 @@ CVE-2026-77568
 	REJECTED
 CVE-2026-77396 (PJSIP is a free and open source multimedia communication library writt ...)
 	- pjproject <removed>
-	- asterisk <unfixed>
+	- asterisk <unfixed> (bug #1149963)
 	NOTE: https://github.com/pjsip/pjproject/security/advisories/GHSA-6p2p-5wf8-h5hr
 	NOTE: Fixed by: https://github.com/pjsip/pjproject/commit/7ecc6584969a923c4190b6912afbf5952b5a4b9f
 CVE-2026-77386 (Kyoo is a self-hosted media server focused on movies, series, and anim ...)
@@ -28895,7 +28895,7 @@ CVE-2026-85921 (Double free in Windows Secure Kernel Mode allows an authorized a
 CVE-2026-85892 (Concurrent execution using shared resource with improper synchronizati ...)
 	NOT-FOR-US: Microsoft
 CVE-2026-84445 (gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and ...)
-	- golang-google-grpc <unfixed>
+	- golang-google-grpc <unfixed> (bug #1149961)
 	[trixie] - golang-google-grpc <no-dsa> (Minor issue)
 	[bookworm] - golang-google-grpc <postponed> (Limited support, minor issue; DoS, clean crash)
 	NOTE: https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj
@@ -29904,7 +29904,7 @@ CVE-2026-90461 (OpenStack Ironic through 38.0.0 may send a username and password
 	[trixie] - ironic <no-dsa> (Minor issue)
 	NOTE: https://bugs.launchpad.net/ironic/+bug/2162816
 CVE-2026-90460 (An issue was discovered in OpenStack Keystone before 29.0.3. Tokens ob ...)
-	- keystone <unfixed>
+	- keystone <unfixed> (bug #1149956)
 	[trixie] - keystone <no-dsa> (Minor issue)
 	[bookworm] - keystone <postponed> (Minor issue)
 	NOTE: https://bugs.launchpad.net/keystone/+bug/2159643
@@ -32508,7 +32508,7 @@ CVE-2026-79591 (A heap-buffer-overflow and use-after-free vulnerability exists i
 	NOTE: Fixed by: https://github.com/libxls/libxls/commit/881f6ec3dabb017af878949a6ed7167613bd7a69
 	NOTE: https://github.com/tidyverse/readxl/issues/795
 CVE-2026-79590 (A NULL pointer dereference vulnerability exists in the Prism parser co ...)
-	- mruby <unfixed>
+	- mruby <unfixed> (bug #1149962)
 	[trixie] - mruby <no-dsa> (Minor issue)
 	[bookworm] - mruby <postponed> (Minor issue)
 	NOTE: https://github.com/mruby/mruby/issues/7032
@@ -33265,7 +33265,7 @@ CVE-2026-87995 (Open WebUI is an extensible, feature-rich, and user-friendly sel
 CVE-2026-87994 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
 	NOT-FOR-US: Open WebUI
 CVE-2026-87933 (A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affect ...)
-	- cjson <unfixed>
+	- cjson <unfixed> (bug #1149958)
 	NOTE: https://github.com/DaveGamble/cJSON/issues/1060
 	NOTE: https://github.com/DaveGamble/cJSON/pull/1065
 	NOTE: Fixed by: https://github.com/DaveGamble/cJSON/commit/6d9f2443ab071f86e5d9b43025a40929ec41c46c
@@ -33514,7 +33514,7 @@ CVE-2026-87875 (The cupsUTF32ToUTF8() function in CUPS's cups/transcode.c lacks
 	- cups <unfixed> (bug #1147521)
 	NOTE: https://github.com/OpenPrinting/cups/security/advisories/GHSA-559w-7676-3xrq
 CVE-2026-87874 (A flaw was found in the memcached cache plugin of the community.genera ...)
-	- ansible <unfixed>
+	- ansible <unfixed> (bug #1149959)
 	[trixie] - ansible <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2530995
 CVE-2026-87872 (A flaw was found in the OCAPI modules (ocapi_command, ocapi_info) of t ...)
@@ -39215,7 +39215,7 @@ CVE-2026-16310 (The MemberDash plugin for WordPress is vulnerable to Insecure Di
 CVE-2026-13159 (The Real Estate Papi WordPress theme through 1.0.5 does not perform ca ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-85498 [Regression in CVE-2026-4897 fix (polkit read_cookie()) - stack buffer underflow]
-	- policykit-1 <unfixed>
+	- policykit-1 <unfixed> (bug #1149960)
 	[trixie] - policykit-1 <not-affected> (Fix for CVE-2026-4897 not applied)
 	[bookworm] - policykit-1 <not-affected> (Fix for CVE-2026-4897 not applied)
 	NOTE: https://github.com/polkit-org/polkit/pull/702
@@ -48574,7 +48574,7 @@ CVE-2026-64896 (Debug and Test Interface With Improper Access Control vulnerabil
 CVE-2026-5738 (Improper neutralization of input during web page generation ('cross-si ...)
 	NOT-FOR-US: DoXBASE
 CVE-2026-5680 (A flaw was found in Undertow. A remote attacker could exploit this vul ...)
-	- undertow <unfixed>
+	- undertow <unfixed> (bug #1149964)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2455350
 CVE-2026-5218 (Improper neutralization of Script-Related HTML tags in a web page (bas ...)
 	NOT-FOR-US: E-Commerce Pack



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/062abef2f50cf3b791d525c215e5c7e07e48b877

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/062abef2f50cf3b791d525c215e5c7e07e48b877
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261004/9f4bd157/attachment.htm>

More information about the debian-security-tracker-commits mailing list