[Git][security-tracker-team/security-tracker][master] new libreswan issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7d987621 by Moritz Muehlenhoff at 2026-10-14T10:42:41+02:00
new libreswan issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -573,7 +573,9 @@ CVE-2026-94512 (Heap-based buffer overflow in SQL Server allows an authorized at
 CVE-2026-94506 (Out-of-bounds read in Microsoft Office Access allows an unauthorized a ...)
 	NOT-FOR-US: Microsoft
 CVE-2026-94453 (Libreswan's pluto daemon has a use-after-free vulnerability when a cli ...)
-	TODO: check
+	- libreswan <unfixed>
+	NOTE: https://libreswan.org/security/CVE-2026-94453/CVE-2026-94453.txt
+	NOTE: https://libreswan.org/security/CVE-2026-94453/
 CVE-2026-94377 (The Verified Reviews (Avis V\xe9rifi\xe9s) plugin for WordPress is vul ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-94370 (A defect in the Qt for MCUs core string handling causes heap memory co ...)
@@ -1945,11 +1947,17 @@ CVE-2026-77816 (IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0
 CVE-2026-77496 (Heap-based buffer overflow in Windows Imaging Component allows an unau ...)
 	NOT-FOR-US: Microsoft
 CVE-2026-77207 (Libreswan has a null pointer dereference bug in the PKCS#7 handling co ...)
-	TODO: check
+	- libreswan <unfixed>
+	NOTE: https://libreswan.org/security/CVE-2026-77207/CVE-2026-77207.txt
+	NOTE: https://libreswan.org/security/CVE-2026-77207/
 CVE-2026-77206 (Libreswan's IKEv2 state machine has a null pointer dereference bug in  ...)
-	TODO: check
+	- libreswan <unfixed>
+	NOTE: https://libreswan.org/security/CVE-2026-77206/CVE-2026-77206.txt
+	NOTE: https://libreswan.org/security/CVE-2026-77206/
 CVE-2026-77205 (Libreswan in FIPS mode has a vulnerability where badly formed received ...)
-	TODO: check
+	- libreswan <unfixed>
+	NOTE: https://libreswan.org/security/CVE-2026-77205/CVE-2026-77205.txt
+	NOTE: https://libreswan.org/security/CVE-2026-77205/
 CVE-2026-77114 (The Document Gallery plugin for WordPress is vulnerable to Stored Cros ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-76001 (ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnera ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7d9876215b7319691787e9f0bb418a4395a92ea0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7d9876215b7319691787e9f0bb418a4395a92ea0
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261014/30c81e45/attachment.htm>