[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2026-103754/bookworm

[Bastien Roucariès (@rouca)]

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d1364a46 by Bastien Roucariès at 2026-10-07T12:13:06+02:00
CVE-2026-103754/bookworm

- - - - -
95643aee by Bastien Roucariès at 2026-10-07T12:15:05+02:00
apache-directory-api/bookworm

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4777,6 +4777,7 @@ CVE-2026-103600 (Uncontrolled recursion in the ASN.1 parser (Asn1InputStream, As
 CVE-2026-103552 (Stack Overflow vulnerability in Apache Directory LDAP API.    Before b ...)
 	- apache-directory-api <unfixed> (bug #1149877)
 	[trixie] - apache-directory-api <no-dsa> (Minor issue)
+	[bookworm] - apache-directory-api <postponed> (Minor issue)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/10/02/4
 CVE-2026-103426 (The Relevanssi Premium plugin for WordPress is vulnerable to Stored Cr ...)
 	NOT-FOR-US: WordPress plugin
@@ -4792,6 +4793,7 @@ CVE-2026-102772 (The CMB2 plugin for WordPress is vulnerable to Stored Cross-Sit
 CVE-2026-102731 (Memory allocation with excessive size value vulnerability in Apache Di ...)
 	- apache-directory-api <unfixed> (bug #1149877)
 	[trixie] - apache-directory-api <no-dsa> (Minor issue)
+	[bookworm] - apache-directory-api <postponed> (Minor issue)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/10/02/3
 CVE-2026-102626 (An authenticated LimeSurvey Community Edition 7.4.0user with the globa ...)
 	- limesurvey <itp> (bug #472802)
@@ -5445,6 +5447,7 @@ CVE-2026-103757 (Budibase through 3.41.0 contains a server-side request forgery
 CVE-2026-103754 (A flaw was found in ansible-runner. The unstream_dir() function, which ...)
 	- ansible-runner <unfixed> (bug #1149995)
 	[trixie] - ansible-runner <no-dsa> (Minor issue)
+	[bookworm] - ansible-runner <postponed> (Minor issue)
 	NOTE: https://github.com/ansible/ansible-runner/pull/1550
 CVE-2026-103752 (Unauthenticated Privilege Escalation in Authorizer <= 3.15.3 versions.)
 	NOT-FOR-US: WordPress plugin or theme



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/a99ae1832153d07e07a35cc9e0f0b38712f17088...95643aeeca24da2ae5efc73a156813945fc328e1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/a99ae1832153d07e07a35cc9e0f0b38712f17088...95643aeeca24da2ae5efc73a156813945fc328e1
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261007/d47f834a/attachment-0001.htm>