[Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sat Oct 17 08:14:11 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
025e63aa by security tracker role at 2026-10-17T07:14:04+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,32 +1,178 @@
-CVE-2026-110759
+CVE-2026-97314 (The ThirstyAffiliates WordPress plugin before 3.12.1 does not check t ...)
+ TODO: check
+CVE-2026-96660 (The User Registration & Membership \u2013 Free & Paid Memberships, Sub ...)
+ TODO: check
+CVE-2026-96628 (Arcane is an interface for managing Docker containers, images, network ...)
+ TODO: check
+CVE-2026-96627 (Arcane is an interface for managing Docker containers, images, network ...)
+ TODO: check
+CVE-2026-96626 (Arcane is an interface for managing Docker containers, images, network ...)
+ TODO: check
+CVE-2026-96620 (Claude Agent SDK is a Python SDK for Claude Code. Prior to 0.2.121, th ...)
+ TODO: check
+CVE-2026-96542 (Incorrect permission assignment (CWE-732) in the standalone installer ...)
+ TODO: check
+CVE-2026-92978 (The User Registration & Membership \u2013 Free & Paid Memberships, Sub ...)
+ TODO: check
+CVE-2026-92798 (The User Registration & Membership plugin for WordPress is vulnerable ...)
+ TODO: check
+CVE-2026-92715 (The Tutor LMS \u2013 eLearning and online course solution plugin for W ...)
+ TODO: check
+CVE-2026-92433 (The Patreon WordPress plugin before 1.10.0 does not verify a nonce whe ...)
+ TODO: check
+CVE-2026-92432 (The Patreon WordPress plugin before 1.10.0 does not validate a user-su ...)
+ TODO: check
+CVE-2026-92431 (The Patreon WordPress plugin before 1.10.0 does not perform an authori ...)
+ TODO: check
+CVE-2026-91074 (The BSK PDF Manager WordPress plugin through 3.8.1 does not properly s ...)
+ TODO: check
+CVE-2026-89096 (A flaw was found in nfs-utils. An unauthenticated remote attacker can ...)
+ TODO: check
+CVE-2026-81344 (The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 ...)
+ TODO: check
+CVE-2026-81343 (The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 ...)
+ TODO: check
+CVE-2026-69080 (Exposure of SQL Black List to an Unauthorized Actor vulnerability in A ...)
+ TODO: check
+CVE-2026-69077 (Exposure ofunauthorized cross-project job manipulation vulnerability i ...)
+ TODO: check
+CVE-2026-69076 (Exposure of Job Discard to an Unauthorized Actor vulnerability in Apac ...)
+ TODO: check
+CVE-2026-68573 (Improper Authentication vulnerability in Apache Kylin. Unauthenticated ...)
+ TODO: check
+CVE-2026-68572 (Exposure of Sensitive Information to an Unauthorized Actor vulnerabili ...)
+ TODO: check
+CVE-2026-68498 (StreamReadConstraints.maxNameLength (default 50,000 characters) is int ...)
+ TODO: check
+CVE-2026-64862 (Frappe HR is an open-source human resources management solution (HRMS) ...)
+ TODO: check
+CVE-2026-62438 (A flaw was found in GIMP. An attacker can cause a Denial of Service (D ...)
+ TODO: check
+CVE-2026-61726 (Tandoor Recipes is an application for managing recipes, planning meals ...)
+ TODO: check
+CVE-2026-59970 (Tandoor Recipes is an application for managing recipes, planning meals ...)
+ TODO: check
+CVE-2026-59966 (Tandoor Recipes is an application for managing recipes, planning meals ...)
+ TODO: check
+CVE-2026-59963 (Tandoor Recipes is an application for managing recipes, planning meals ...)
+ TODO: check
+CVE-2026-55796 (Frappe HR is an open-source human resources management solution (HRMS) ...)
+ TODO: check
+CVE-2026-49410 (OpenHuman is an open-source agent harness available as a desktop appli ...)
+ TODO: check
+CVE-2026-30971 (ZoneMinder is a free, open source closed-circuit television software a ...)
+ TODO: check
+CVE-2026-17591 (A flaw was found in libarchive. An attacker can cause a Denial of Serv ...)
+ TODO: check
+CVE-2026-111855 (An issue was discovered on Tektronix 3 Series MDO devices before 1.21. ...)
+ TODO: check
+CVE-2026-111854 (An issue was discovered on Tektronix 3 Series MDO devices before 1.21. ...)
+ TODO: check
+CVE-2026-111853 (An issue was discovered on Tektronix 3 Series MDO devices before 1.21. ...)
+ TODO: check
+CVE-2026-111823 (Mage OSS through 0.9.80 before 76c4f46 can proceed with session creati ...)
+ TODO: check
+CVE-2026-111802 (A flaw was found in Nautilus. When a removable drive or disk image is ...)
+ TODO: check
+CVE-2026-111726 (The Themify Builder plugin for WordPress is vulnerable to Stored Cross ...)
+ TODO: check
+CVE-2026-111602 (The Appointment Booking Plugin \u2013 LatePoint | Calendar & Schedulin ...)
+ TODO: check
+CVE-2026-111601 (The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerab ...)
+ TODO: check
+CVE-2026-111044 (Sunshine is a self-hosted game stream host for Moonlight. From 2026.32 ...)
+ TODO: check
+CVE-2026-110653 (The Appointment Booking Plugin \u2013 LatePoint | Calendar & Schedulin ...)
+ TODO: check
+CVE-2026-110527 (The WP User Manager WordPress plugin before 2.9.20 does not roll back ...)
+ TODO: check
+CVE-2026-110384 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-110268 (The Post Export Import with Media plugin for WordPress is vulnerable t ...)
+ TODO: check
+CVE-2026-109989 (The Themify Popup plugin for WordPress is vulnerable to Stored Cross-S ...)
+ TODO: check
+CVE-2026-109985 (The xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN p ...)
+ TODO: check
+CVE-2026-109369 (The WP Booking System \u2013 Booking Calendar plugin for WordPress is ...)
+ TODO: check
+CVE-2026-109368 (The WP Booking System \u2013 Booking Calendar plugin for WordPress is ...)
+ TODO: check
+CVE-2026-109208 (The LearnPress \u2013 WordPress LMS Plugin for Create and Sell Online ...)
+ TODO: check
+CVE-2026-108743 (Improper Neutralization of Special Elements used in an OS Command ('OS ...)
+ TODO: check
+CVE-2026-108709 (Authentication bypass within in-house network in Apache Kylin.Impact m ...)
+ TODO: check
+CVE-2026-108374 (ERPNext is a free and open source Enterprise Resource Planning tool. P ...)
+ TODO: check
+CVE-2026-108373 (ERPNext is a free and open source Enterprise Resource Planning tool. P ...)
+ TODO: check
+CVE-2026-108372 (Open and provider-neutral, LoopX is a lightweight state kernel and loc ...)
+ TODO: check
+CVE-2026-108123 (The WP Booking System \u2013 Booking Calendar plugin for WordPress is ...)
+ TODO: check
+CVE-2026-107763 (The Fastcache by Host.it plugin for WordPress is vulnerable to authori ...)
+ TODO: check
+CVE-2026-107762 (The Kirki \u2013 Freeform Page Builder, Website Builder & Customizer p ...)
+ TODO: check
+CVE-2026-107752 (The Welcart e-Commerce plugin for WordPress is vulnerable to generic S ...)
+ TODO: check
+CVE-2026-107744 (The LearnPress \u2013 WordPress LMS Plugin for Create and Sell Online ...)
+ TODO: check
+CVE-2026-107346
+ REJECTED
+CVE-2026-106549
+ REJECTED
+CVE-2026-106470 (The WP Data Access WordPress plugin before 5.5.88 does not have autho ...)
+ TODO: check
+CVE-2026-104736 (The LearnPress plugin for WordPress is vulnerable to PHP Object Inject ...)
+ TODO: check
+CVE-2026-104734 (The Kirki \u2013 Freeform Page Builder, Website Builder & Customizer p ...)
+ TODO: check
+CVE-2026-104246 (The Contact Form 7 Signature Addon WordPress plugin through 4.2.2 does ...)
+ TODO: check
+CVE-2026-104122 (The Ukr-To-Lat WordPress plugin through 1.3.5 does not sanitize and es ...)
+ TODO: check
+CVE-2026-103899 (The EU VAT Assistant for WooCommerce plugin for WordPress is vulnerabl ...)
+ TODO: check
+CVE-2026-103376 (The PeachPay \u2014 Payments & Express Checkout for WooCommerce (suppo ...)
+ TODO: check
+CVE-2026-102834 (JavaCV provides Java interfaces to OpenCV, FFmpeg, and other multimedi ...)
+ TODO: check
+CVE-2026-102608 (ZoneMinder is a free, open source closed-circuit television software a ...)
+ TODO: check
+CVE-2026-102607 (ZoneMinder is a free, open source closed-circuit television software a ...)
+ TODO: check
+CVE-2026-110759 (Text::CSV_XS versions before 1.65 for Perl return a 0xFF byte that is ...)
- libtext-csv-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44408696/
NOTE: Fixed by: https://github.com/cpan-authors/Text-CSV_XS/commit/7627f1a2bb8ffe4e81d9847318a060822043f7f3 (1.65)
-CVE-2026-110758
+CVE-2026-110758 (Text::CSV_XS versions before 1.65 for Perl read before the start of an ...)
- libtext-csv-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44408695/
NOTE: Fixed by: https://github.com/cpan-authors/Text-CSV_XS/commit/efed7ee21177c59a5b69e787f84154e1fcb0d095 (1.65)
-CVE-2026-110757
+CVE-2026-110757 (Text::CSV_XS versions before 1.65 for Perl allow record splitting by w ...)
- libtext-csv-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44408694/
NOTE: Fixed by: https://github.com/cpan-authors/Text-CSV_XS/commit/fcfb796cb50de9cef8b94a70535304ac41a50c56 (1.65)
-CVE-2026-110756
+CVE-2026-110756 (Text::CSV_XS versions before 1.65 for Perl drop the end of a record an ...)
- libtext-csv-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44408690/
NOTE: Fixed by: https://github.com/cpan-authors/Text-CSV_XS/commit/0610a8d81262ae6f1ac82a88d73c8a471f38af19 (1.65)
-CVE-2026-110755
+CVE-2026-110755 (Text::CSV_XS versions before 1.65 for Perl allow quadratic CPU use by ...)
- libtext-csv-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44408689/
NOTE: Fixed by: https://github.com/cpan-authors/Text-CSV_XS/commit/f25e00aacd6fc15857b22487cb2e5ca263f377e0 (1.65)
-CVE-2026-110754
+CVE-2026-110754 (Text::CSV_XS versions before 1.65 for Perl leak the parsed fields of a ...)
- libtext-csv-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44408685/
NOTE: Fixed by: https://github.com/cpan-authors/Text-CSV_XS/commit/eb4f739ffc605bfb1ab710e5330704faa0e89f08 (1.65)
-CVE-2026-110752
+CVE-2026-110752 (Text::CSV_XS versions before 1.65 for Perl allow memory exhaustion by ...)
- libtext-csv-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44408679/
NOTE: Fixed by: https://github.com/cpan-authors/Text-CSV_XS/commit/d9d3d66f9ff6a8a1bc255a6ef05100f9b102b92b (1.65)
-CVE-2026-110753
+CVE-2026-110753 (Text::CSV_XS versions from 1.46 before 1.65 for Perl have a use-after- ...)
- libtext-csv-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44408682/
NOTE: Fixed by: https://github.com/cpan-authors/Text-CSV_XS/commit/f082d5c8aab1b8d16b6181d4f3042a06947e260f (1.65)
@@ -1485,7 +1631,7 @@ CVE-2026-111171 (Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 contain
NOT-FOR-US: web3.py
CVE-2026-111170 (kedro-datasets from 9.3.0 through 9.6.0 contains a path traversal vuln ...)
NOT-FOR-US: kedro-datasets
-CVE-2026-111169 (La Suite Docs through 6.0.0 contains an authorization bypass vulnerabi ...)
+CVE-2026-111169 (La Suite Docs through 6.0.1 contains an authorization bypass vulnerabi ...)
NOT-FOR-US: La Suite Docs
CVE-2026-111168 (LibreDesk before 2.9.0-rc.8 contains a stored cross-site scripting vul ...)
NOT-FOR-US: LibreDesk
@@ -18141,7 +18287,8 @@ CVE-2026-25267 (Memory corruption when non-secure loader rewrites page tables be
NOT-FOR-US: Qualcomm
CVE-2026-25263 (Memory corruption while processing IOCTL command called from user spac ...)
NOT-FOR-US: Qualcomm
-CVE-2026-21589 (This is a vulnerability in Bitbucket Data Center, Confluence Data Cent ...)
+CVE-2026-21589
+ REJECTED
NOT-FOR-US: Atlassian
CVE-2026-105786 (Joplin is an open source note-taking and to-do application that organi ...)
- joplin <itp> (bug #931306)
@@ -21246,42 +21393,52 @@ CVE-2024-58388 (Sharp (and Toshiba Tec rebranded) multifunction printers contain
CVE-2023-54404 (Zod schema-validation library through 4.6.5, fixed in commit e06a510, ...)
NOT-FOR-US: Zod
CVE-2026-42356 (Deployment of wrong handler vulnerability in Apache HTTP Server allows ...)
+ {DSA-6569-1}
- apache2 2.4.69-1
NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-42356
NOTE: Fixed by: https://github.com/apache/httpd/commit/863594b37381151c397b9fbc609170d026411614
CVE-2026-42528 (A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier ...)
+ {DSA-6569-1}
- apache2 2.4.69-1
NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-42528
NOTE: Fixed by: https://github.com/apache/httpd/commit/a653b98099ced413982ddad6f9416e54292f4656
CVE-2026-46729 (NULL Pointer Dereference vulnerability in Apache HTTP Servers mod_hear ...)
+ {DSA-6569-1}
- apache2 2.4.69-1
NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-46729
NOTE: Fixed by: https://github.com/apache/httpd/commit/7b12a7936ec439b3e1f5fc36cfacf5b915eb652c
CVE-2026-47360 (Exposure of Sensitive Information to an Unauthorized Actor vulnerabili ...)
+ {DSA-6569-1}
- apache2 2.4.69-1
NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-47360
NOTE: Fixed by: https://github.com/apache/httpd/commit/cb5163f30dd0d6bc921eeac96415a381f153ac3a
CVE-2026-48005 (Missing authentication checks in mod_auth_digest in Apache Software Fo ...)
+ {DSA-6569-1}
- apache2 2.4.69-1
NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-48005
NOTE: Fixed by: https://github.com/apache/httpd/commit/fc722c619fdf7f8eb69eb8bd4201265065cd3ac2
CVE-2026-56153 (Out-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_ ...)
+ {DSA-6569-1}
- apache2 2.4.69-1
NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-56153
NOTE: Fixed by: https://github.com/apache/httpd/commit/6654234dcb395e07fd62255670356f84ec733195
CVE-2026-56154 (Use After Free vulnerability in Apache HTTP Server's mod_rewrite when ...)
+ {DSA-6569-1}
- apache2 2.4.69-1
NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-56154
NOTE: Fixed by: https://github.com/apache/httpd/commit/6e4d1e614597109909dda495d235b6a1331d7beb
CVE-2026-56449 (Out-of-bounds Write vulnerability in Apache HTTP Server's mod_proxy_ht ...)
+ {DSA-6569-1}
- apache2 2.4.69-1
NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-56449
NOTE: Fixed by: https://github.com/apache/httpd/commit/c721d4e1cf5c142149509490015cef1a75715595
CVE-2026-57941 (Use After Free vulnerability in Apache HTTP Server's mod_http2via shar ...)
+ {DSA-6569-1}
- apache2 2.4.69-1
NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-57941
NOTE: Fixed by: https://github.com/apache/httpd/commit/d072ed8f06d66a30072227d61a2fc04ad9ae5c99
CVE-2026-58415 (Internal state files accessible to external parties in mod_dav_fs in A ...)
+ {DSA-6569-1}
- apache2 2.4.69-1
NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-58415
NOTE: Fixed by: https://github.com/apache/httpd/commit/5a00f76e12c5e1e477e902b44b42b94d9bc571ed
@@ -21290,38 +21447,47 @@ CVE-2026-59685 (Out-of-bounds Write vulnerability in Apache HTTP Server on Windo
NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-59685
NOTE: Fixed by: https://github.com/apache/httpd/commit/7d158df34d07b53c010ff54bfa182a76f9fab672
CVE-2026-59797 (Improper Privilege Management vulnerability in Apache HTTP Server's mo ...)
+ {DSA-6569-1}
- apache2 2.4.69-1
NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-59797
NOTE: Fixed by: https://github.com/apache/httpd/commit/1ee1c1fef2511454461b6770b204c4934a6495d8
CVE-2026-63045 (Improper validation of FTP PASV reply address in mod_proxy_ftp in Apac ...)
+ {DSA-6569-1}
- apache2 2.4.69-1
NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-63045
NOTE: Fixed by: https://github.com/apache/httpd/commit/c0a3e5cbcb245022d08e490f98153f90120363ed
CVE-2026-63292 (Stack-based buffer overflow in mod_vhost_alias in Apache Software Foun ...)
+ {DSA-6569-1}
- apache2 2.4.69-1
NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-63292
NOTE: Fixed by: https://github.com/apache/httpd/commit/7ed3f91688b7a1e1ac48486fd2e5eeb2932e879f
CVE-2026-63686 (A NULL pointer dereference in mod_xml2enc in Apache Software Foundatio ...)
+ {DSA-6569-1}
- apache2 2.4.69-1
NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-63686
NOTE: Fixed by: https://github.com/apache/httpd/commit/6fa059e4a270e0a66dd398e96875df86abff3a75
CVE-2026-63718 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response S ...)
+ {DSA-6569-1}
- apache2 2.4.69-1
NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-63718
NOTE: Fixed by: https://github.com/apache/httpd/commit/7c32a06bc504875544185c27cfbc6d8dc257c941
CVE-2026-73636 (Authentication bypass by capture-replay in mod_auth_digest in Apache S ...)
+ {DSA-6569-1}
- apache2 2.4.69-1
NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-73636
NOTE: Fixed by: https://github.com/apache/httpd/commit/fc722c619fdf7f8eb69eb8bd4201265065cd3ac2
CVE-2026-73637 (Use after free in mod_auth_digest in Apache Software Foundation Apache ...)
+ {DSA-6569-1}
- apache2 2.4.69-1
NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-73637
NOTE: Fixed by: https://github.com/apache/httpd/commit/fc722c619fdf7f8eb69eb8bd4201265065cd3ac2
CVE-2026-79768 (Path equivalence: '/./' (single dot directory) vulnerability in Apache ...)
+ {DSA-6569-1}
- apache2 2.4.69-1
NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-79768
NOTE: Fixed by: https://github.com/apache/httpd/commit/dce2ddbca79be74e7bcb7b8cc7a3a291cf4e9588
CVE-2026-93546 (Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 al ...)
+ {DSA-6569-1}
- apache2 2.4.69-1
NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-93546
NOTE: Fixed by: https://github.com/apache/httpd/commit/fa8c354189597453b2c8b38e081efa9b723abd3c
@@ -27346,7 +27512,7 @@ CVE-2026-96544
NOTE: https://gitlab.gnome.org/GNOME/gimp/-/work_items/16790
NOTE: Fixed by: https://gitlab.gnome.org/GNOME/gimp/-/commit/562befbff7b408f0825dbfd56e0e7447d097583a
NOTE: Follow-up to CVE-2026-62439
-CVE-2026-62439
+CVE-2026-62439 (A flaw was found in GIMP. An integer overflow occurs in the file-pvr p ...)
- gimp 3.2.6-1
[trixie] - gimp <not-affected> (Vulnerable code not present)
[bookworm] - gimp <not-affected> (Vulnerable code not present)
@@ -45641,12 +45807,12 @@ CVE-2026-89774 (In the Linux kernel, the following vulnerability has been resolv
[trixie] - linux 6.12.100-1
[bookworm] - linux 6.1.180-1
NOTE: https://git.kernel.org/linus/4e37f6452d586b95c346a9abdd2fb80b67794f39 (7.1-rc3)
-CVE-2026-89085 [heap buffer overflow in _init_fats / fat_table_read]
+CVE-2026-89085 (A flaw was found in parted. A heap-based buffer overflow can occur whe ...)
- parted 3.8-2 (bug #1148169)
[trixie] - parted <no-dsa> (Minor issue)
NOTE: https://alioth-lists.debian.net/pipermail/parted-devel/2026-September/006032.html
NOTE: Fixed by: https://gitweb.git.savannah.gnu.org/gitweb/?p=parted.git;a=commit;h=73301c6915781c2eee66d0b1cc9d41a70bf901d6 (v3.7.13)
-CVE-2026-89088 [heap buffer overflow in duplicate_legacy_root_dir]
+CVE-2026-89088 (A flaw was found in parted. A heap-based buffer overflow exists in lib ...)
- parted 3.8-2 (bug #1148169)
[trixie] - parted <no-dsa> (Minor issue)
NOTE: https://alioth-lists.debian.net/pipermail/parted-devel/2026-September/006032.html
@@ -87584,7 +87750,7 @@ CVE-2023-7347
CVE-2026-XXXX [RUSTSEC-2025-0167]
- rust-bitmaps <not-affected> (Only affects 3.2.0)
NOTE: https://rustsec.org/advisories/RUSTSEC-2025-0167.html
-CVE-2026-102342 [RUSTSEC-2026-0213]
+CVE-2026-102342 (ammonia is a Rust library for repairing and securing untrusted HTML. P ...)
- rust-ammonia 4.1.4-1
[trixie] - rust-ammonia <no-dsa> (Minor issue)
[bookworm] - rust-ammonia <postponed> (Limited support, minor issue)
@@ -151397,7 +151563,7 @@ CVE-2026-10815 (A vulnerability was found in LakshayD02 Hostel-Management-System
NOT-FOR-US: LakshayD02 Hostel-Management-System-PHP
CVE-2026-10814 (A vulnerability has been found in milvus-io milvus up to 2.6.13. This ...)
NOT-FOR-US: milvus-io milvus
-CVE-2026-10813 (A flaw has been found in LMCache up to 0.4.6. This affects the functio ...)
+CVE-2026-10813 (A flaw has been found in LMCache up to 0.5.4. This affects the functio ...)
NOT-FOR-US: LMCache
CVE-2026-10812 (A vulnerability was detected in zilliztech GPTCache up to 0.1.44. Affe ...)
NOT-FOR-US: zilliztech GPTCache
@@ -185721,7 +185887,7 @@ CVE-2026-33555 (An issue was discovered in HAProxy before 3.3.6. The HTTP/3 pars
NOTE: Fixed by: https://git.haproxy.org/?p=haproxy-3.0.git;a=commit;h=425b969d6ea4114f4ae260f57802c65ccafc319c (v3.0.19)
NOTE: Fixed by: https://git.haproxy.org/?p=haproxy-2.6.git;a=commit;h=3d8388d089170f8544c4a43bf0575f296c885f94 (v2.6.25)
CVE-2026-32316 (jq is a command-line JSON processor. An integer overflow vulnerability ...)
- {DSA-6416-1 DLA-4662-1 DLA-4599-1}
+ {DSA-6416-1 DLA-4840-1 DLA-4662-1 DLA-4599-1}
- jq 1.8.1-5 (bug #1133921)
NOTE: https://github.com/jqlang/jq/security/advisories/GHSA-q3h9-m34w-h76f
NOTE: Fixed by: https://github.com/jqlang/jq/commit/e47e56d226519635768e6aab2f38f0ab037c09e5 (jq-1.8.2rc1)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/025e63aaaa7bf83d10ee95f5c246d734ec5cf873
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/025e63aaaa7bf83d10ee95f5c246d734ec5cf873
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261017/ce095257/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list