[Git][security-tracker-team/security-tracker][master] libmikmod/bookworm
Bastien Roucariès (@rouca)
rouca at debian.org
Sat Oct 10 18:15:38 BST 2026
Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker
Commits:
6889e829 by Bastien Roucariès at 2026-10-10T19:15:10+02:00
libmikmod/bookworm
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4643,14 +4643,17 @@ CVE-2026-105840 (lrzsz before 0.13.0 contains a path traversal vulnerability in
CVE-2026-105839 (libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer ...)
- libmikmod 3.3.14-1
[trixie] - libmikmod <no-dsa> (Minor issue)
+ [bookworm] - libmikmod <postponed> (Minor issue)
NOTE: Fixed by: https://github.com/sezero/mikmod/commit/097b69281fad6ba38a553569e6f55dbfdd71dc2a (libmikmod-3.3.14)
CVE-2026-105838 (libmikmod before 3.3.14 contains a heap out-of-bounds read vulnerabili ...)
- libmikmod 3.3.14-1
[trixie] - libmikmod <no-dsa> (Minor issue)
+ [bookworm] - libmikmod <postponed> (Minor issue)
NOTE: Fixed by: https://github.com/sezero/mikmod/commit/e7c6c9e88fbe3e8af4668a2e116bb8de341383f8 (libmikmod-3.3.14)
CVE-2026-105837 (libmikmod before 3.3.14 contains an integer overflow vulnerability in ...)
- libmikmod 3.3.14-1
[trixie] - libmikmod <no-dsa> (Minor issue)
+ [bookworm] - libmikmod <postponed> (Minor issue)
NOTE: Fixed by: https://github.com/sezero/mikmod/commit/a125eabbd086f311496ae46d08aaebcad0a1c426 (libmikmod-3.3.14)
CVE-2026-105836 (QloApps through 1.7.0 contains an authorization bypass vulnerability i ...)
NOT-FOR-US: QloApps
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6889e829f9c169667d9805e729f35fb7933fb808
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6889e829f9c169667d9805e729f35fb7933fb808
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261010/ee97278a/attachment.htm>
More information about the debian-security-tracker-commits
mailing list