[Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues

Thu Oct 8 20:24:25 BST 2026


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
550cadc4 by Salvatore Bonaccorso at 2026-10-08T21:24:09+02:00
Add Debian bug references for various issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -709,36 +709,36 @@ CVE-2026-106571 (ImageMagick is free and open-source software used for editing a
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/8f3a15e60b723bfe3e80bd1b5e4bee88397467f7 (7.1.2-31)
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/91f4ed74a1fd8326ade11a1153de110f22d89aa1 (6.9.13-56)
 CVE-2026-106570 (ImageMagick is free and open-source software used for editing and mani ...)
-	- imagemagick <unfixed>
+	- imagemagick <unfixed> (bug #1150337)
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2vwg-3g4g-qprm
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/cafc7372c8113a9636766f0eddde7b90373c9b44 (7.1.2-32)
 CVE-2026-106569 (ImageMagick is free and open-source software used for editing and mani ...)
-	- imagemagick <unfixed>
+	- imagemagick <unfixed> (bug #1150337)
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-gwj6-pm7x-3r63
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/0691546106f4c7e8857da9f21a0e4a8f41915388 (7.1.2-32)
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/5ecd5b047cee7ccfe4e14a733a0755c7b2a90c7d (7.1.2-32)
 CVE-2026-106568 (ImageMagick is free and open-source software used for editing and mani ...)
-	- imagemagick <unfixed>
+	- imagemagick <unfixed> (bug #1150337)
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9p7q-63hw-mcr4
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/e4f7ad983df6c831832eba3689f96b75f8b67051 (7.1.2-32)
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/27e36ca5cb446664bfc284d28d91fced8887b025 (6.9.13-57)
 CVE-2026-106567 (ImageMagick is free and open-source software used for editing and mani ...)
-	- imagemagick <unfixed>
+	- imagemagick <unfixed> (bug #1150337)
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g6p6-3ggg-3w7j
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/f053f778409932d55b95758c4b1516b63191d1eb (7.1.2-32)
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/61024a2677a3c7973a2dd27170877d8e51419473 (6.9.13-57)
 CVE-2026-106566 (ImageMagick is free and open-source software used for editing and mani ...)
-	- imagemagick <unfixed>
+	- imagemagick <unfixed> (bug #1150337)
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-54hm-vrmh-75qj
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/48e5ce1779fc640a389f0020fd7d965d0c08236e (7.1.2-32)
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/11d2af00a948e9ca2919d9a8684d335a48484094 (6.9.13-57)
 CVE-2026-106565 (ImageMagick is free and open-source software used for editing and mani ...)
-	- imagemagick <unfixed>
+	- imagemagick <unfixed> (bug #1150337)
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m9c7-gf3j-hx6h
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/e9872c4a165d869e75d10799c47195725ebf4132 (7.1.2-32)
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/82f752927a552cbba1213b1d023b85e76845774c (6.9.13-57)
 CVE-2026-106564 (ImageMagick is free and open-source software used for editing and mani ...)
-	- imagemagick <unfixed>
+	- imagemagick <unfixed> (bug #1150337)
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-54rx-5x9g-g465
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/f7437ebafcd92d6959eca4086d80b150d52bdb7c (7.1.2-32)
 CVE-2026-106563 (Backstage is an open framework for building developer portals. Prior t ...)
@@ -762,19 +762,19 @@ CVE-2026-106510 (Backstage is an open framework for building developer portals.
 CVE-2026-106164 (In Progress\xae Telerik\xae Document Processing SpreadProcessing libra ...)
 	NOT-FOR-US: Progress Software
 CVE-2026-106067 (A heap-based buffer overflow was found in GIMP\u2019s Hot color filter ...)
-	- gimp <unfixed>
+	- gimp <unfixed> (bug #1150342)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2547461
 	NOTE: https://gitlab.gnome.org/GNOME/gimp/-/work_items/16801
 CVE-2026-106066 (A heap-based buffer overflow was found in GIMP\u2019s raw data export  ...)
-	- gimp <unfixed>
+	- gimp <unfixed> (bug #1150341)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2547459
 	NOTE: https://gitlab.gnome.org/GNOME/gimp/-/work_items/16801
 CVE-2026-106065 (A heap-based buffer overflow was found in GIMP\u2019s PCX export plug- ...)
-	- gimp <unfixed>
+	- gimp <unfixed> (bug #1150340)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2547456
 	NOTE: https://gitlab.gnome.org/GNOME/gimp/-/work_items/16801
 CVE-2026-106064 (A heap-based buffer overflow was found in GIMP\u2019s GIF export plug- ...)
-	- gimp <unfixed>
+	- gimp <unfixed> (bug #1150339)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2547446
 	NOTE: https://gitlab.gnome.org/GNOME/gimp/-/work_items/16801
 CVE-2026-106059 (GitAhead through 2.7.1 on macOS contains a command injection vulnerabi ...)
@@ -860,10 +860,10 @@ CVE-2025-64392 (This vulnerability in Veeam Backup Enterprise Manager allows an
 CVE-2025-64391 (This vulnerability in Veeam Agent for Microsoft Windows allows a low-p ...)
 	NOT-FOR-US: Veeam
 CVE-2026-92415 (\u2014 Use of Externally-Controlled Input to Select Classes or Code vu ...)
-	- jackrabbit <unfixed>
+	- jackrabbit <unfixed> (bug #1150343)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/10/07/28
 CVE-2026-92414 (: Session Fixation / Session Reuse across Users vulnerability in Apach ...)
-	- jackrabbit <unfixed>
+	- jackrabbit <unfixed> (bug #1150343)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/10/07/27
 CVE-2026-98374 (In the Linux kernel, the following vulnerability has been resolved:  t ...)
 	- linux 7.2.9-1
@@ -1660,7 +1660,7 @@ CVE-2026-67270 (Dell Container Storage Modules (CSM) versions prior to 1.18.0, c
 CVE-2026-67269 (Dell Container Storage Modules (CSM) Operator, versions prior to 1.18. ...)
 	NOT-FOR-US: Dell / EMC
 CVE-2026-66666 (Insertion of Sensitive Information Into Sent Data vulnerability in Aut ...)
-	- wordpress <unfixed>
+	- wordpress <unfixed> (bug #1150336)
 	NOTE: https://wordpress.org/news/2026/10/wordpress-7-1-3-maintenance-and-security-release/
 CVE-2026-66588 (Unauthenticated Broken Access Control in The7 <= 14.2.2 versions.)
 	NOT-FOR-US: WordPress plugin or theme
@@ -12739,42 +12739,42 @@ CVE-2026-94418 (Under WOLFSSL_SMALL_CERT_VERIFY, ProcessPeerCertParse() runs the
 	NOTE: https://github.com/wolfSSL/wolfssl/pull/11500 (v5.9.4-stable)
 	NOTE: WOLFSSL_SMALL_CERT_VERIFY not built
 CVE-2026-94417 (When an application enables both OCSP and CRL revocation checking on o ...)
-	- wolfssl <unfixed>
+	- wolfssl <unfixed> (bug #1150338)
 	[trixie] - wolfssl <no-dsa> (Minor issue)
 	[bookworm] - wolfssl <end-of-life> (EOL in bookworm LTS)
 	NOTE: https://github.com/wolfSSL/wolfssl/pull/11500 (v5.9.4-stable)
 CVE-2026-93304 (A (D)TLS 1.2 client can accept a ChangeCipherSpec message before it ha ...)
-	- wolfssl <unfixed>
+	- wolfssl <unfixed> (bug #1150338)
 	[trixie] - wolfssl <no-dsa> (Minor issue)
 	[bookworm] - wolfssl <end-of-life> (EOL in bookworm LTS)
 	NOTE: https://github.com/wolfSSL/wolfssl/pull/11458 (v5.9.4-stable)
 CVE-2026-93302 (MatchTrustedPeer ignores the public key used, leading to forged CA clo ...)
-	- wolfssl <unfixed>
+	- wolfssl <unfixed> (bug #1150338)
 	[trixie] - wolfssl <no-dsa> (Minor issue)
 	[bookworm] - wolfssl <end-of-life> (EOL in bookworm LTS)
 	NOTE: Fixed by: https://github.com/wolfSSL/wolfssl/commit/22bcd51d553eaac1de37bee91fdac80cc47961e1 (v5.9.4-stable)
 CVE-2026-89136 (When using RPK (Raw Public Key), the client side of a TLS 1.2, 1.3 and ...)
-	- wolfssl <unfixed>
+	- wolfssl <unfixed> (bug #1150338)
 	[trixie] - wolfssl <no-dsa> (Minor issue)
 	[bookworm] - wolfssl <not-affected> (RPK not in 5.5.4)
 	NOTE: https://github.com/wolfSSL/wolfssl/pull/11009 (v5.9.4-stable)
 CVE-2026-89135 (A failed X509_verify_cert call permanently plants an unverified attack ...)
-	- wolfssl <unfixed>
+	- wolfssl <unfixed> (bug #1150338)
 	[trixie] - wolfssl <not-affected> (Vulnerable code not present, see #1149565)
 	[bookworm] - wolfssl <not-affected> (no WOLFSSL_TEMP_CA path)
 	NOTE: https://github.com/wolfSSL/wolfssl/pull/11009 (v5.9.4-stable)
 CVE-2026-89134 (A certificate with no dNSName SAN but another SAN type present (e.g. r ...)
-	- wolfssl <unfixed>
+	- wolfssl <unfixed> (bug #1150338)
 	[trixie] - wolfssl <no-dsa> (Minor issue)
 	[bookworm] - wolfssl <end-of-life> (EOL in bookworm LTS)
 	NOTE: https://github.com/wolfSSL/wolfssl/pull/10837 (v5.9.4-stable)
 CVE-2026-89133 (wolfSSL versions 5.9.2 and earlier contain a flaw in the X.509 certifi ...)
-	- wolfssl <unfixed>
+	- wolfssl <unfixed> (bug #1150338)
 	[trixie] - wolfssl <no-dsa> (Minor issue)
 	[bookworm] - wolfssl <postponed> (Minor issue; upstream fix changes the layout of the installed struct Signer)
 	NOTE: https://github.com/wolfSSL/wolfssl/pull/10687 (v5.9.4-stable)
 CVE-2026-89102 (In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side impleme ...)
-	- wolfssl <unfixed>
+	- wolfssl <unfixed> (bug #1150338)
 	[trixie] - wolfssl <no-dsa> (Minor issue)
 	[bookworm] - wolfssl <not-affected> (no status_request_v2 pending-CA code in 5.5.4)
 	NOTE: https://github.com/wolfSSL/wolfssl/pull/11027 (v5.9.4-stable)
@@ -12795,7 +12795,7 @@ CVE-2026-88772 (Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gatew
 CVE-2026-88771 (Improper input validation vulnerability in Citrix NetScaler ADC and Ci ...)
 	NOT-FOR-US: NetScaler
 CVE-2026-15442 (In all builds that make use of (D)TLS, including default builds, there ...)
-	- wolfssl <unfixed>
+	- wolfssl <unfixed> (bug #1150338)
 	[trixie] - wolfssl <no-dsa> (Minor issue)
 	[bookworm] - wolfssl <end-of-life> (EOL in bookworm LTS)
 	NOTE: https://github.com/wolfSSL/wolfssl/pull/10863 (v5.9.4-stable)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/550cadc464cc30359216e9dc87dcba9856229747

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/550cadc464cc30359216e9dc87dcba9856229747
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261008/2989a240/attachment.htm>
