[Git][security-tracker-team/security-tracker][master] CVEs assigned for modsecurity issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
14a4eaa7 by Salvatore Bonaccorso at 2026-10-05T13:20:36+02:00
CVEs assigned for modsecurity issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2758,7 +2758,7 @@ CVE-2023-54403 (Yonyou U8 CRM before V16.5 and V18 contains an arbitrary file re
 	NOT-FOR-US: Yonyou U8 CRM
 CVE-2023-54402 (iDocView contains a server-side request forgery vulnerability in its / ...)
 	NOT-FOR-US: iDocView
-CVE-2026-XXXX [GHSA-5pww-8rfg-9crf: RFC 2231 filename* parameter bypasses multipart filename rules]
+CVE-2026-104269 [GHSA-5pww-8rfg-9crf: RFC 2231 filename* parameter bypasses multipart filename rules]
 	- modsecurity <unfixed> (bug #1149651)
 	- modsecurity-apache <unfixed> (bug #1149714)
 	NOTE: https://github.com/advisories/GHSA-5pww-8rfg-9crf
@@ -2768,12 +2768,12 @@ CVE-2026-XXXX [GHSA-4j47-8qcr-jf59: t:base64DecodeExt does not decode - and _, b
 	- modsecurity-apache <unfixed> (bug #1149714)
 	NOTE: https://github.com/advisories/GHSA-4j47-8qcr-jf59
 	NOTE: https://modsecurity.org/20260928/security-update-digest-overview-of-recent-advisory-fixes-2026-september/
-CVE-2026-XXXX [GHSA-qrch-pjfr-9g47: t:removeComments mishandles the character after a comment terminator, bypassing rules]
+CVE-2026-104259 [GHSA-qrch-pjfr-9g47: t:removeComments mishandles the character after a comment terminator, bypassing rules]
 	- modsecurity <unfixed> (bug #1149651)
 	- modsecurity-apache <unfixed> (bug #1149714)
 	NOTE: https://github.com/advisories/GHSA-qrch-pjfr-9g47
 	NOTE: https://modsecurity.org/20260928/security-update-digest-overview-of-recent-advisory-fixes-2026-september/
-CVE-2026-XXXX [GHSA-5m93-4h75-3p2w: @rxGlobal PCRE2 error handling: match-limit fail-open and invalid-pattern crash]
+CVE-2026-103932 [GHSA-5m93-4h75-3p2w: @rxGlobal PCRE2 error handling: match-limit fail-open and invalid-pattern crash]
 	- modsecurity <unfixed> (bug #1149651)
 	NOTE: https://github.com/advisories/GHSA-5m93-4h75-3p2w
 	NOTE: https://modsecurity.org/20260928/security-update-digest-overview-of-recent-advisory-fixes-2026-september/



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/14a4eaa7deaa15e321e5bc6a9d113f288c480ecf

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/14a4eaa7deaa15e321e5bc6a9d113f288c480ecf
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261005/0a648ac0/attachment.htm>