[Git][security-tracker-team/security-tracker][master] apache-directory-api/bookworm
Bastien Roucariès (@rouca)
rouca at debian.org
Mon Oct 5 10:23:41 BST 2026
Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker
Commits:
87e6fb0f by Bastien Roucariès at 2026-10-05T11:22:57+02:00
apache-directory-api/bookworm
follow trixie
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1278,18 +1278,22 @@ CVE-2026-103956 (Missing authentication for critical function in the authenticat
CVE-2026-103885 (Asymmetric Resource Consumptionvulnerability in Apache Directory LDAP ...)
- apache-directory-api <unfixed> (bug #1149877)
[trixie] - apache-directory-api <no-dsa> (Minor issue)
+ [bookworm] - apache-directory-api <postponed> (Minor issue)
NOTE: https://www.openwall.com/lists/oss-security/2026/10/02/8
CVE-2026-103880 (Asymmetric Resource Consumptionvulnerability in Apache Directory LDAP ...)
- apache-directory-api <unfixed> (bug #1149877)
[trixie] - apache-directory-api <no-dsa> (Minor issue)
+ [bookworm] - apache-directory-api <postponed> (Minor issue)
NOTE: https://www.openwall.com/lists/oss-security/2026/10/02/7
CVE-2026-103878 (Cleartext transmission of sensitive informationvulnerability in Apache ...)
- apache-directory-api <unfixed> (bug #1149877)
[trixie] - apache-directory-api <no-dsa> (Minor issue)
+ [bookworm] - apache-directory-api <postponed> (Minor issue)
NOTE: https://www.openwall.com/lists/oss-security/2026/10/02/6
CVE-2026-103877 (Deserialization of Untrusted Data vulnerability in Apache Directory LD ...)
- apache-directory-api <unfixed> (bug #1149877)
[trixie] - apache-directory-api <no-dsa> (Minor issue)
+ [bookworm] - apache-directory-api <postponed> (Minor issue)
NOTE: https://www.openwall.com/lists/oss-security/2026/10/02/5
CVE-2026-103763 (SiYuan before v3.8.5 contains an information disclosure vulnerability ...)
NOT-FOR-US: SiYuan
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/87e6fb0f97d26fdeb2140deb07b6c3f228b1d599
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/87e6fb0f97d26fdeb2140deb07b6c3f228b1d599
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261005/46e0993b/attachment.htm>
More information about the debian-security-tracker-commits
mailing list