[Git][security-tracker-team/security-tracker][master] Add two new keycloak issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Oct 9 10:22:19 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fc847ec8 by Salvatore Bonaccorso at 2026-10-09T11:22:03+02:00
Add two new keycloak issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -547,7 +547,7 @@ CVE-2026-107634 (Dislocker through 0.7.3 contains a heap out-of-bounds read vuln
 	- dislocker <unfixed>
 	NOTE: Fixed by: https://github.com/Aorimn/dislocker/commit/9158e9e41dd669b360cbc53cc18ccae729b67b48
 CVE-2026-107623 (A flaw was found in the OIDC Dynamic Client Registration (DCR) compone ...)
-	TODO: check
+	- keycloak <itp> (bug #1088287)
 CVE-2026-107615 (An uncontrolled search path element vulnerability in GlavSoft TightVNC ...)
 	NOT-FOR-US: GlavSoft TightVNC Server for Windows
 CVE-2026-107614 (An integer underflow in WinCursorShapeUtils::trimTransparent() in Glav ...)
@@ -561,7 +561,7 @@ CVE-2026-107611 (An out-of-bounds read vulnerability in the ZRLE decoder of Glav
 CVE-2026-107608 (Improper link resolution before file access in the asset bundling outp ...)
 	NOT-FOR-US: Amazon
 CVE-2026-107604 (A flaw was found in the installation provider and client registration  ...)
-	TODO: check
+	- keycloak <itp> (bug #1088287)
 CVE-2026-107589 (Insufficient job validation for service accounts in Jacamar CI prior t ...)
 	NOT-FOR-US: Jacamar CI
 CVE-2026-107587 (Improper certificate validation in the webmail of Progressive Robot hM ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc847ec8f5b1403dd2c698bfda95efbbff9e02cb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc847ec8f5b1403dd2c698bfda95efbbff9e02cb
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261009/6acc06b5/attachment.htm>


More information about the debian-security-tracker-commits mailing list