[Git][security-tracker-team/security-tracker][master] bugnums

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f592ad4e by Moritz Muehlenhoff at 2026-10-06T22:32:55+02:00
bugnums

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1879,7 +1879,7 @@ CVE-2026-93315 (When proxy networking with CA injection is enabled, a build can
 	NOTE: https://github.com/moby/buildkit/security/advisories/GHSA-2f5p-x9ph-g97x
 	TODO: check security impact on docker.io
 CVE-2026-92821 (A flaw was found in SSSD. When configured to evaluate password expirat ...)
-	- sssd <unfixed>
+	- sssd <unfixed> (bug #1150199)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2479031
 CVE-2026-91107 (openSIS Classic 9.3 allows an authenticated user with the built-in tea ...)
 	NOT-FOR-US: OS4ED openSIS
@@ -10632,11 +10632,12 @@ CVE-2026-12265 (Zohocorp ManageEngine DDI Central versions before 6201 are vulne
 CVE-2026-12264 (Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable  ...)
 	NOT-FOR-US: Zoho
 CVE-2026-102010 (A flaw was found in GCC. When an application calls the erase_if functi ...)
-	- gcc-16 <unfixed>
-	- gcc-15 <unfixed>
-	- gcc-14 <unfixed>
+	- gcc-16 <unfixed> (bug #1150194)
+	- gcc-15 <unfixed> (bug #1150195)
+	- gcc-14 <unfixed> (bug #1150196)
 	[trixie] - gcc-14 <no-dsa> (Minor issue)
-	- gcc-12 <unfixed>
+	- gcc-13 <unfixed> (bug #1150197)
+	- gcc-12 <unfixed> (bug #1150198)
 	[trixie] - gcc-12 <ignored> (Minor issue, not fixed in upstream 12 branch)
 	NOTE: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=127656
 	NOTE: https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=aaa8351f4d2e636f9680a1f0a8ebc2f0a60611e6
@@ -16745,7 +16746,7 @@ CVE-2026-78253 (Uncontrolled recursion in QXmlStreamReader::readElementText() in
 	- qt6-base 6.11.2+dfsg-5
 	[trixie] - qt6-base <no-dsa> (Minor issue)
 	[bookworm] - qt6-base <postponed> (Minor issue)
-	- qtbase-opensource-src <unfixed>
+	- qtbase-opensource-src <unfixed> (bug #1150200)
 	[trixie] - qtbase-opensource-src <no-dsa> (Minor issue)
 	[bookworm] - qtbase-opensource-src <postponed> (Minor issue)
 	NOTE: https://codereview.qt-project.org/c/qt/qtbase/+/754345



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f592ad4eb8c96abe731c855a7b6161913f13355d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f592ad4eb8c96abe731c855a7b6161913f13355d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261006/f44afbb4/attachment-0001.htm>