[Git][security-tracker-team/security-tracker][master] Adjust some notes to prefix fixing commits
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sat Oct 10 09:27:23 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
ea8835e0 by Salvatore Bonaccorso at 2026-10-10T10:26:59+02:00
Adjust some notes to prefix fixing commits
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -24106,7 +24106,7 @@ CVE-2026-63450 (Suricata is a network Intrusion Detection System, Intrusion Prev
[trixie] - suricata <ignored> (Will be removed in next point release)
NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-56wx-7hqh-wfgr
NOTE: https://github.com/OISF/suricata/pull/15704
- NOTE: Fixed by; https://github.com/OISF/suricata/commit/feb0ff91159cea474a983adf92e4b56fb16e4ffc (suricata-8.0.6)
+ NOTE: Fixed by: https://github.com/OISF/suricata/commit/feb0ff91159cea474a983adf92e4b56fb16e4ffc (suricata-8.0.6)
CVE-2026-63449 (Suricata is a network Intrusion Detection System, Intrusion Prevention ...)
- suricata 1:8.0.6-1
[trixie] - suricata <ignored> (Will be removed in next point release)
@@ -95798,7 +95798,7 @@ CVE-2026-66373 (Redis before 8.8.0, in the unusual case where an authenticated a
- redis <not-affected> (Incomplete fix for CVE-2026-25243 not applied)
NOTE: Fixed by: https://github.com/redis/redis/commit/4f62a8bf15c634187d8a87d874f8988032f90b6c (8.6.5)
NOTE: Fixed by: https://github.com/redis/redis/commit/04292292f2f5c180322292007a599a700611ebaf (7.2.15)
- NOTE: fixed by: https://github.com/redis/redis/commit/41a958720e64e03576dd652d224aa46d22c096c3 (6.2.23)
+ NOTE: Fixed by: https://github.com/redis/redis/commit/41a958720e64e03576dd652d224aa46d22c096c3 (6.2.23)
NOTE: Issue exists because of an incomplete fix for CVE-2026-25243.
NOTE: The same flaw in valkey is tracked in CVE-2026-63639, where valkey was affected and
NOTE: fixed it in 9.1.1-1
@@ -167727,7 +167727,7 @@ CVE-2026-35362 (The safe_traversal module in uutils coreutils, which provides pr
[trixie] - rust-coreutils <no-dsa> (Minor issue)
[bookworm] - rust-coreutils <no-dsa> (Minor issue)
NOTE: https://github.com/uutils/coreutils/pull/9792
- NOTE: FIXED BY: https://github.com/uutils/coreutils/commit/30239e69a328e76d2377f2a0bc02fbde61c34280 (0.6.0)
+ NOTE: Fixed by: https://github.com/uutils/coreutils/commit/30239e69a328e76d2377f2a0bc02fbde61c34280 (0.6.0)
CVE-2026-35361 (The mknod utility in uutils coreutils fails to handle security labels ...)
- rust-coreutils 0.6.0-1
[trixie] - rust-coreutils <no-dsa> (Minor issue)
@@ -172510,7 +172510,7 @@ CVE-2026-34002 (A flaw was found in the X.Org X server. This vulnerability, an o
[trixie] - xwayland <ignored> (Minor issue; Xwayland shouldn't be running as root)
[bookworm] - xwayland <ignored> (Minor issue; Xwayland shouldn't be running as root)
NOTE: https://lists.x.org/archives/xorg-announce/2026-April/003677.html
- NOTE: fixed by: https://gitlab.freedesktop.org/xorg/xserver/-/commit/f056ce1cc96ed9261052c31524162c78e458f98c
+ NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/xserver/-/commit/f056ce1cc96ed9261052c31524162c78e458f98c
CVE-2026-34001 (A flaw was found in the X.Org X server. This use-after-free vulnerabil ...)
{DLA-4738-1}
- xorg-server 2:21.1.22-1
@@ -176716,7 +176716,7 @@ CVE-2026-32144 (Improper Certificate Validation vulnerability in Erlang OTP publ
NOTE: https://github.com/erlang/otp/pull/10873
NOTE: https://cna.erlef.org/cves/CVE-2026-32144.html
NOTE: Fixed by: https://github.com/erlang/otp/commit/ac7ff528be857c5d35eb29c7f24106e3a16d4891 (OTP-28.4.2)
- NOTE: fixed by: https://github.com/erlang/otp/commit/49033a6d93a5be0ee0dce04e1fb8b4ae7de1e0c0 (OTP-27.3.4.10)
+ NOTE: Fixed by: https://github.com/erlang/otp/commit/49033a6d93a5be0ee0dce04e1fb8b4ae7de1e0c0 (OTP-27.3.4.10)
CVE-2026-31842 (Tinyproxy through 1.11.3 is vulnerable to HTTP request parsing desynch ...)
- tinyproxy <unfixed> (bug #1133355)
[trixie] - tinyproxy <no-dsa> (Minor issue)
@@ -188599,7 +188599,7 @@ CVE-2026-35539 (An issue was discovered in Roundcube Webmail before 1.5.14 and 1
NOTE: https://roundcube.net/news/2026/03/18/security-updates-1.7-rc5-1.6.14-1.5.14
NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/1b30edf5369668c92fe91dae3d52e477c808aa4f (1.7-rc5)
NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/10a6d1fa8acac85c727b0a6ae4a6642bfa27bea1 (1.6.14)
- NOTE: fixed by: https://github.com/roundcube/roundcubemail/commit/d742954ccbcdee7020f8f2e7c49ce0fca5a0efab (1.5.14)
+ NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/d742954ccbcdee7020f8f2e7c49ce0fca5a0efab (1.5.14)
CVE-2026-35544 (An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. ...)
{DSA-6196-1 DLA-4517-1}
- roundcube 1.6.14+dfsg-1 (bug #1131182)
@@ -188607,7 +188607,7 @@ CVE-2026-35544 (An issue was discovered in Roundcube Webmail before 1.5.14 and 1
NOTE: https://nullcathedral.com/posts/2026-03-18-roundcube-round-two-three-more-sanitizer-bypasses/#css-position-fixed-important
NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/226811a1c974271dbedca72672923abaff8191c0 (1.7-rc5)
NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/099009b9c8e1d3c636fb9a5af72f7c2596018662 (1.6.14)
- NOTE: fixed by: https://github.com/roundcube/roundcubemail/commit/57dec0c127b98e0c8e3b9c26c80049b9c4bcaea7 (1.5.14)
+ NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/57dec0c127b98e0c8e3b9c26c80049b9c4bcaea7 (1.5.14)
CVE-2026-35542 (An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. ...)
{DSA-6196-1 DLA-4517-1}
- roundcube 1.6.14+dfsg-1 (bug #1131182)
@@ -209127,7 +209127,7 @@ CVE-2026-24684 (FreeRDP is a free implementation of the Remote Desktop Protocol.
[bookworm] - freerdp2 <no-dsa> (Minor issue)
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vcgv-xgjp-h83q
NOTE: Fixed by: https://github.com/FreeRDP/FreeRDP/commit/622bb7b4402491ca003f47472d0e478132673696 (3.22.0)
- NOTE: fixed by: https://github.com/FreeRDP/FreeRDP/commit/afa6851dc80835d3101e40fcef51b6c5c0f43ea5 (3.22.0)
+ NOTE: Fixed by: https://github.com/FreeRDP/FreeRDP/commit/afa6851dc80835d3101e40fcef51b6c5c0f43ea5 (3.22.0)
CVE-2026-24679 (FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ...)
- freerdp3 3.22.0+dfsg-1
[trixie] - freerdp3 3.15.0+dfsg-2.1+deb13u1
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ea8835e027776623eb11709c525429ab3c1daef0
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ea8835e027776623eb11709c525429ab3c1daef0
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261010/b1b51884/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list