[Git][security-tracker-team/security-tracker][master] Add new libmikmod issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c4025393 by Salvatore Bonaccorso at 2026-10-06T22:27:05+02:00
Add new libmikmod issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -972,11 +972,14 @@ CVE-2026-105840 (lrzsz before 0.13.0 contains a path traversal vulnerability in
 	- lrzsz <unfixed>
 	NOTE: https://ohse.de/uwe/software/lrzsz/NEWS-0.13.0.html
 CVE-2026-105839 (libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer  ...)
-	TODO: check
+	- libmikmod 3.3.14-1
+	NOTE: Fixed by: https://github.com/sezero/mikmod/commit/097b69281fad6ba38a553569e6f55dbfdd71dc2a (libmikmod-3.3.14)
 CVE-2026-105838 (libmikmod before 3.3.14 contains a heap out-of-bounds read vulnerabili ...)
-	TODO: check
+	- libmikmod 3.3.14-1
+	NOTE: Fixed by: https://github.com/sezero/mikmod/commit/e7c6c9e88fbe3e8af4668a2e116bb8de341383f8 (libmikmod-3.3.14)
 CVE-2026-105837 (libmikmod before 3.3.14 contains an integer overflow vulnerability in  ...)
-	TODO: check
+	- libmikmod 3.3.14-1
+	NOTE: Fixed by: https://github.com/sezero/mikmod/commit/a125eabbd086f311496ae46d08aaebcad0a1c426 (libmikmod-3.3.14)
 CVE-2026-105836 (QloApps through 1.7.0 contains an authorization bypass vulnerability i ...)
 	TODO: check
 CVE-2026-105835 (PLANKA 2.2.0 through 2.2.1 fails to limit incorrect TOTP codes submitt ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c40253938762eb403bf710278dd78606ccae57e8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c40253938762eb403bf710278dd78606ccae57e8
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261006/be926785/attachment.htm>