[Git][security-tracker-team/security-tracker][master] Add two krb5 issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
da7a2fe9 by Salvatore Bonaccorso at 2026-10-09T10:55:26+02:00
Add two krb5 issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -417,7 +417,10 @@ CVE-2026-107780 (Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ea
 CVE-2026-107779 (Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 ...)
 	TODO: check
 CVE-2026-107778 (MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereferen ...)
-	TODO: check
+	- krb5 <unfixed>
+	NOTE: https://github.com/krb5/krb5/pull/1511
+	NOTE: Fixed by: https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08 (master)
+	NOTE: Fixed by: https://github.com/krb5/krb5/commit/62196e2b269159a5465f5b8d0ed7cf6f29c3282a (krb5-1.22 branch)
 CVE-2026-107738 (SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, ...)
 	NOT-FOR-US: SumatraPDF
 CVE-2026-107737 (SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, ...)
@@ -471,7 +474,10 @@ CVE-2026-107714 (The Mechanize library is used for automating interaction with w
 CVE-2026-107709 (A path traversal vulnerability exists in Bower decompress-zip through  ...)
 	TODO: check
 CVE-2026-107708 (MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerabil ...)
-	TODO: check
+	- krb5 <unfixed>
+	NOTE: https://github.com/krb5/krb5/pull/1510
+	NOTE: Fixed by: https://github.com/krb5/krb5/commit/f6e2c397ceda6467ebbaab8ed66d4895c9f1d6a7 (master)
+	NOTE: Fixed by: https://github.com/krb5/krb5/commit/a88a18cafa1040a0c4f9c8d08288fc98831ec86d (krb5-1.22 branch)
 CVE-2026-107707 (Intego Antivirus for Windows through 3.0.0.1 contains a link following ...)
 	TODO: check
 CVE-2026-107706 (Dolibarr ERP CRM before 24.0.2 contains an incorrect authorization vul ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/da7a2fe9d058733c49ab4447c6ce5bbfb76c791c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/da7a2fe9d058733c49ab4447c6ce5bbfb76c791c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261009/73ecfb97/attachment-0001.htm>