[Git][security-tracker-team/security-tracker][master] Add CVE-2026-76061/cri-o
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Oct 7 08:46:56 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
0f780834 by Salvatore Bonaccorso at 2026-10-07T09:46:36+02:00
Add CVE-2026-76061/cri-o
- - - - -
2 changed files:
- data/CVE/list
- data/packages/nfu.yaml
Changes:
=====================================
data/CVE/list
=====================================
@@ -177,7 +177,7 @@ CVE-2026-76742 (Authentication bypass vulnerabilities exist in the web managemen
CVE-2026-76741 (Buffer overflow vulnerabilities exist in the affected interface of AOS ...)
NOT-FOR-US: HPE
CVE-2026-76061 (A flaw was found in CRI-O's `bind_mount_prefix` handling. When configu ...)
- TODO: check
+ - cri-o <itp> (bug #979702)
CVE-2026-73278 (Gitea's OAuth2 and OpenID Connect sign-in paths do not require a WebAu ...)
NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-70357 (Gitea validates a repository migration hostname against its network al ...)
=====================================
data/packages/nfu.yaml
=====================================
@@ -113,6 +113,8 @@
cna: ERIC
- reason: Fermax Technologies
cna: FERMAX
+- reason: Flexera Software
+ cna: flexera
- reason: Forcepoint
cna: forcepoint
- reason: Forescout
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0f780834ba5301d2f2d7d75aa1de61ee95a90bd1
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0f780834ba5301d2f2d7d75aa1de61ee95a90bd1
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261007/5a9e46e8/attachment.htm>
More information about the debian-security-tracker-commits
mailing list