[Git][security-tracker-team/security-tracker][master] older nagios4 issue CVEfied

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0f22bdaa by Moritz Muehlenhoff at 2026-10-12T22:32:16+02:00
older nagios4 issue CVEfied

- - - - -


2 changed files:

- data/CVE/list
- data/DSA/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -59572,7 +59572,9 @@ CVE-2026-48549 (Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains
 	- nagios4 4.5.14+ds-1 (bug #1145888)
 	NOTE: Fixed by: https://github.com/NagiosEnterprises/nagioscore/commit/02aba584656eb10c2ff83a696b166f4bc7dd1304 (nagios-4.5.13)
 CVE-2026-48548 (Nagios Core before 4.5.12 contains a cross-site request forgery vulner ...)
-	- nagios4 4.5.12+ds-1
+	- nagios4 4.5.12+ds-1 (bug #1136340)
+	[trixie] - nagios4 4.4.6-4.1+deb13u1
+	[bookworm] - nagios4 4.4.6-4+deb12u1
 	NOTE: Fixed by: https://github.com/NagiosEnterprises/nagioscore/commit/e5ed38e53a5d65721520c7c67be0746d63da28cb (nagios-4.5.12)
 CVE-2026-47841 (An application using Spring Security's WebAuthn support may be vulnera ...)
 	- libspring-security-2.0-java <removed>
@@ -150634,11 +150636,6 @@ CVE-2026-2651 (A vulnerability in MLflow versions <=3.10.1.dev0 allows unauthori
 	NOT-FOR-US: mlflow
 CVE-2026-25193 (Insertion of Sensitive Information into Log File (CWE-532)in some Comm ...)
 	NOT-FOR-US: Gallagher
-CVE-2026-XXXX [CSRF Security Fix]
-	- nagios4 4.5.12+ds-1 (bug #1136340)
-	[trixie] - nagios4 4.4.6-4.1+deb13u1
-	[bookworm] - nagios4 4.4.6-4+deb12u1
-	NOTE: Fixed by: https://github.com/NagiosEnterprises/nagioscore/commit/e5ed38e53a5d65721520c7c67be0746d63da28cb (nagios-4.5.12)
 CVE-2026-48832 (action/cookie.php in ecrire in SPIP before 4.4.15 is prone to an open  ...)
 	{DSA-6296-1}
 	- spip 4.4.15+dfsg-1


=====================================
data/DSA/list
=====================================
@@ -747,6 +747,7 @@
 	[bookworm] - exim4 4.96-15+deb12u10
 	[trixie] - exim4 4.98.2-1+deb13u3
 [28 May 2026] DSA-6308-1 nagios4 - security update
+	{CVE-2026-48548}
 	[bookworm] - nagios4 4.4.6-4+deb12u1
 	[trixie] - nagios4 4.4.6-4.1+deb13u1
 [28 May 2026] DSA-6307-1 kitty - security update



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0f22bdaa7d67ddaa0644595590598ca884415091

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0f22bdaa7d67ddaa0644595590598ca884415091
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261012/236429b4/attachment-0001.htm>