[Git][security-tracker-team/security-tracker][master] Add two new keycloak issues
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri Oct 9 10:22:19 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
fc847ec8 by Salvatore Bonaccorso at 2026-10-09T11:22:03+02:00
Add two new keycloak issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -547,7 +547,7 @@ CVE-2026-107634 (Dislocker through 0.7.3 contains a heap out-of-bounds read vuln
- dislocker <unfixed>
NOTE: Fixed by: https://github.com/Aorimn/dislocker/commit/9158e9e41dd669b360cbc53cc18ccae729b67b48
CVE-2026-107623 (A flaw was found in the OIDC Dynamic Client Registration (DCR) compone ...)
- TODO: check
+ - keycloak <itp> (bug #1088287)
CVE-2026-107615 (An uncontrolled search path element vulnerability in GlavSoft TightVNC ...)
NOT-FOR-US: GlavSoft TightVNC Server for Windows
CVE-2026-107614 (An integer underflow in WinCursorShapeUtils::trimTransparent() in Glav ...)
@@ -561,7 +561,7 @@ CVE-2026-107611 (An out-of-bounds read vulnerability in the ZRLE decoder of Glav
CVE-2026-107608 (Improper link resolution before file access in the asset bundling outp ...)
NOT-FOR-US: Amazon
CVE-2026-107604 (A flaw was found in the installation provider and client registration ...)
- TODO: check
+ - keycloak <itp> (bug #1088287)
CVE-2026-107589 (Insufficient job validation for service accounts in Jacamar CI prior t ...)
NOT-FOR-US: Jacamar CI
CVE-2026-107587 (Improper certificate validation in the webmail of Progressive Robot hM ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc847ec8f5b1403dd2c698bfda95efbbff9e02cb
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc847ec8f5b1403dd2c698bfda95efbbff9e02cb
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261009/6acc06b5/attachment.htm>
More information about the debian-security-tracker-commits
mailing list