[Git][security-tracker-team/security-tracker][master] new pupnp issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
57015dd3 by Moritz Muehlenhoff at 2026-10-16T22:26:44+02:00
new pupnp issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -59,7 +59,9 @@ CVE-2026-81452 (Dell Alienware Command Center (AWCC), versions prior to 6.14.54.
 CVE-2026-80092 (Authentication bypass by assumed-immutable data in Microsoft Identity  ...)
 	NOT-FOR-US: Microsoft
 CVE-2026-77630 (pupnp is an SDK for development of UPnP device and control point appli ...)
-	TODO: check
+	- pupnp <unfixed>
+	NOTE: https://github.com/pupnp/pupnp/security/advisories/GHSA-46ph-jff5-5h77
+	NOTE: https://github.com/pupnp/pupnp/commit/5dba8070b4d64d976f8e6fc13f1f301befebe7d2 (release-22.0.4)
 CVE-2026-77474 (destructive_command_guard (dcg) is a command-line safety tool that blo ...)
 	TODO: check
 CVE-2026-75903 (The Vulnity Security plugin for WordPress is vulnerable to authenticat ...)
@@ -87,11 +89,17 @@ CVE-2026-59967 (Tandoor Recipes is an application for managing recipes, planning
 CVE-2026-59962 (Tandoor Recipes is an application for managing recipes, planning meals ...)
 	TODO: check
 CVE-2026-57488 (pupnp is an SDK for development of UPnP device and control point appli ...)
-	TODO: check
+	- pupnp <unfixed>
+	NOTE: https://github.com/pupnp/pupnp/security/advisories/GHSA-g6c2-x4r9-352g
+	NOTE: https://github.com/pupnp/pupnp/commit/de9602aef34ff722f3630d66c9be8eaa0aa9f012 (release-2.0.2)
 CVE-2026-57487 (pupnp is an SDK for development of UPnP device and control point appli ...)
-	TODO: check
+	- pupnp <unfixed>
+	NOTE: https://github.com/pupnp/pupnp/security/advisories/GHSA-gcj7-j9f7-q84c
+	NOTE: https://github.com/pupnp/pupnp/commit/9ff9bc583ad8ee4ba022634434a7b71db9bd96e1 (release-2.0.2)
 CVE-2026-57486 (pupnp is an SDK for development of UPnP device and control point appli ...)
-	TODO: check
+	- pupnp <unfixed>
+	NOTE: https://github.com/pupnp/pupnp/security/advisories/GHSA-q54q-vx78-v9rq
+	NOTE: https://github.com/pupnp/pupnp/commit/4b2f775e3b98de3cfb096707bcde040c5562d9ec (release-2.0.2)
 CVE-2026-57447 (Discourse Doc Categories is a plugin for organizing Discourse topics a ...)
 	NOT-FOR-US: Discourse
 CVE-2026-57446 (libIEC61850 is an open-source implementation of IEC 61850 client and s ...)
@@ -99,7 +107,9 @@ CVE-2026-57446 (libIEC61850 is an open-source implementation of IEC 61850 client
 CVE-2026-57169 (Dockhand is a Docker management application. Prior to 1.0.34, the in-b ...)
 	TODO: check
 CVE-2026-55862 (pupnp is an SDK for development of UPnP device and control point appli ...)
-	TODO: check
+	- pupnp <unfixed>
+	NOTE: https://github.com/pupnp/pupnp/security/advisories/GHSA-25cx-xv8x-j247
+	NOTE: https://github.com/pupnp/pupnp/commit/82ccaec7ab6b1258ea1ac66374d8940712ccd4c4 (release-2.0.0)
 CVE-2026-55836 (Open Zaak is an open-source data and services layer for Dutch case-ori ...)
 	TODO: check
 CVE-2026-55543 (TuxGuitar is an open-source guitar tablature editor. Prior to 2.1.0, a ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/57015dd3e52d32bd131e0a6d29b968ea96d71321

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/57015dd3e52d32bd131e0a6d29b968ea96d71321
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261016/4483f853/attachment-0001.htm>