[Git][security-tracker-team/security-tracker][master] Add two new containerd issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
dee6cf4d by Salvatore Bonaccorso at 2026-10-13T09:31:05+02:00
Add two new containerd issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -23,9 +23,14 @@ CVE-2026-96119 (IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated
 CVE-2026-96012 (IBM Db2 Mirror for i 7.4, 7.5, and 7.6is vulnerable to privilege escal ...)
 	NOT-FOR-US: IBM
 CVE-2026-95838 (containerd is an open-source container runtime. Prior to 1.7.35, 2.0.1 ...)
-	TODO: check
+	- containerd <unfixed>
+	NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-rp3h-jf77-q9p4
+	NOTE: Fixed by: https://github.com/containerd/containerd/commit/e6ca378dcfa610d06589a3ac96aa992de866e4f0
 CVE-2026-95837 (containerd is an open-source container runtime. From 2.1.0 until 2.2.7 ...)
-	TODO: check
+	- containerd <unfixed>
+	NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-p7v4-vr35-mj6f
+	NOTE: https://github.com/containerd/containerd/pull/13913
+	NOTE: Fixed by: https://github.com/containerd/containerd/commit/928c03c6898cad95f795300281fdff0dbc55a32f
 CVE-2026-93892 (IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a rem ...)
 	NOT-FOR-US: IBM
 CVE-2026-93891 (IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a rem ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dee6cf4d530ec911370a3dd446d8b95988c8b4ad

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dee6cf4d530ec911370a3dd446d8b95988c8b4ad
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261013/d94a57fc/attachment.htm>