[Git][security-tracker-team/security-tracker][master] Add new ansible-core issue, but no public details, keep todo

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5930b47f by Salvatore Bonaccorso at 2026-10-09T10:12:40+02:00
Add new ansible-core issue, but no public details, keep todo

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -47,7 +47,9 @@ CVE-2026-89290 (Improper neutralization of Script-Related HTML tags in a web pag
 CVE-2026-89191 (Unsanitised input in the "template name" field of SQLView KRIS's Workf ...)
 	NOT-FOR-US: SQLView KRIS
 CVE-2026-89091 (A flaw was found in ansible-core. When installing a collection with `a ...)
-	TODO: check
+	- ansible-core <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2531646
+	TODO: check, details from Red Hat bugzilla not accessible on 2026-10-09
 CVE-2026-88931 (The Social Web Suite  WordPress plugin through 4.1.12 does not restric ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-88648 (Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers con ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5930b47fa5cff0a8ccdc92b0f6b4abb2abddfd8d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5930b47fa5cff0a8ccdc92b0f6b4abb2abddfd8d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261009/2c823008/attachment.htm>