[Git][security-tracker-team/security-tracker][master] trixie triage

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
618abd2b by Moritz Muehlenhoff at 2026-10-13T17:47:05+02:00
trixie triage

- - - - -


2 changed files:

- data/CVE/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -1207,8 +1207,10 @@ CVE-2026-109448 (Integer wraparound in psqlODBC SQLBindParameter allows an appli
 	NOTE: https://github.com/postgresql-interfaces/psqlodbc/security/advisories/GHSA-cmfx-rm3r-p2jr
 	NOTE: https://github.com/postgresql-interfaces/psqlodbc/commit/86e4418e9553aa0891315db7531f8cd31eb1575e (REL-18_00_0005)
 CVE-2026-109399 (SWUpdate through 2026.05.1 contains an improper certificate validation ...)
-	- swupdate <unfixed>
+	- swupdate 2026.05+dfsg-1
+	[trixie] - swupdate <not-affected> (swupdate in Trixie builds with WolfSSL)
 	NOTE: https://groups.google.com/g/swupdate/c/dsoMcGFnEns
+	NOTE: https://github.com/sbabic/swupdate/commit/e66c5640664a31668926a24c0c84b6b6570dc0d9 (2026.05)
 CVE-2026-109398 (Gumlet php-image-resize before 3.0.1 contains a denial of service vuln ...)
 	NOT-FOR-US: php-image-resize
 CVE-2026-109397 (Thelia before 3.1.2 and 3.2.x before 3.2.1 contains an unrestricted fi ...)
@@ -25178,6 +25180,7 @@ CVE-2026-82843 (The WP OAuth Server ( Login with WordPress ) WordPress plugin be
 CVE-2026-82331 (Improper link resolution before file access ('link following') vulnera ...)
 	- buildstream 2.8.1-1
 	NOTE: https://lists.apache.org/thread/9b342631x7bvtyg0pq7zgywtl2cmy34v
+	NOTE: https://github.com/apache/buildstream/pull/2192
 CVE-2026-81339 (The MasterStudy LMS WordPress Plugin  WordPress plugin before 3.7.50 d ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-81338 (The MasterStudy LMS WordPress Plugin  WordPress plugin before 3.7.50 d ...)


=====================================
data/dsa-needed.txt
=====================================
@@ -161,7 +161,7 @@ shaarli
 --
 social-auth-core
 --
-sogo
+sogo (jmm)
   Regression update for #1144734, new batch of issues from 5.12.10 release
   Peter Wienemann sent debdiff for review in <fce6b95f-9a6e-4bb3-9f76-1db94c748718 at debian.org>
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/618abd2b638985c46ff1e56e92337970c718d9dc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/618abd2b638985c46ff1e56e92337970c718d9dc
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261013/fc529320/attachment-0001.htm>