[Git][security-tracker-team/security-tracker][master] Two docker.io issues added, needs further investigation

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5f172750 by Salvatore Bonaccorso at 2026-10-07T23:05:05+02:00
Two docker.io issues added, needs further investigation

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -25,9 +25,11 @@ CVE-2026-93684 (An SQL user using Impala up to and including version 4.5.2 with
 CVE-2026-93026 (This vulnerability in Veeam Backup & Replication allows a Backup Viewe ...)
 	NOT-FOR-US: Veeam
 CVE-2026-92543 (Docker Engine classifies a registry hostname as insecure using an any- ...)
-	TODO: check
+	- docker.io <unfixed>
+	NOTE: https://github.com/moby/moby/security/advisories/GHSA-7cfq-22r6-qp73
 CVE-2026-92542 (The firewall rules which mark VXLAN datagrams for encryption indiscrim ...)
-	TODO: check
+	- docker.io <unfixed>
+	NOTE: https://github.com/moby/moby/security/advisories/GHSA-6m9p-4h64-m6vh
 CVE-2026-92533 (Path traversal vulnerability in the BugTracker.NET file download compo ...)
 	NOT-FOR-US: BugTracker.NET
 CVE-2026-92532 (Unrestricted file upload vulnerability in the BugTracker.NET attachmen ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5f172750837b13fc86fe19a5dcbeecee2a42a3eb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5f172750837b13fc86fe19a5dcbeecee2a42a3eb
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261007/473c4c60/attachment-0001.htm>