[Git][security-tracker-team/security-tracker][master] Add new misp issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
85022059 by Salvatore Bonaccorso at 2026-10-07T23:08:51+02:00
Add new misp issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -177,9 +177,9 @@ CVE-2026-107313 (pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 and 42.7.5
 	NOTE: https://github.com/pgjdbc/pgjdbc/pull/3500
 	NOTE: Fixed by: https://github.com/pgjdbc/pgjdbc/commit/96f6862bb6bcadde7620688c7bce73f2d01a7ebb (REL42.7.6-rc1)
 CVE-2026-107278 (MISP contains a validation flaw in its object synchronization logic. W ...)
-	TODO: check
+	- misp <itp> (bug #1144317)
 CVE-2026-107276 (MISP contains a race condition in the email-based one-time password (O ...)
-	TODO: check
+	- misp <itp> (bug #1144317)
 CVE-2026-107273 (Gophish 0.11.0 through 0.12.1 contains a server-side request forgery v ...)
 	NOT-FOR-US: Gophish
 CVE-2026-107272 (Gophish through 0.12.1 contains stored and reflected cross-site script ...)
@@ -252,11 +252,11 @@ CVE-2026-107183 (llama.cpp before b11393 contains a use-after-free and double fr
 CVE-2026-107181 (Telegram Desktop before 7.2.9 contains an IPC record-separator injecti ...)
 	TODO: check
 CVE-2026-107180 (On MISP instances configured to require TOTP enrolment (Security.otp_r ...)
-	TODO: check
+	- misp <itp> (bug #1144317)
 CVE-2026-107177 (Express Gateway through 1.16.11 contains a hardcoded cryptographic key ...)
 	NOT-FOR-US: Express Gateway
 CVE-2026-107175 (MISP contains a defect in its event save workflow that prevents the co ...)
-	TODO: check
+	- misp <itp> (bug #1144317)
 CVE-2026-107174 (A flaw was found in source-to-image. When unpacking archive files, the ...)
 	TODO: check
 CVE-2026-107170 (A flaw was found in m17n-lib. A partial failure during library initial ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/850220595e35dbf07cb4085538f7ddb96d0f3640

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/850220595e35dbf07cb4085538f7ddb96d0f3640
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261007/e749801f/attachment.htm>