[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for various issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sun Oct 18 08:12:08 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
df061a61 by Salvatore Bonaccorso at 2026-10-18T09:11:47+02:00
Add Debian bug reference for various issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -831,7 +831,7 @@ CVE-2026-111581 (A flaw was found in libblockdev. The bd_fs_ntfs_set_label() and
 	- libblockdev <unfixed>
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2554104
 CVE-2026-111555 (A flaw was found in luksmeta. Improper boundary validation of metadata ...)
-	- luksmeta <unfixed>
+	- luksmeta <unfixed> (bug #1151196)
 	[trixie] - luksmeta <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2554026
 	NOTE: https://github.com/latchset/luksmeta/issues/20
@@ -3331,7 +3331,7 @@ CVE-2026-110593 (BottleCRM through 1.14.5 contains a server-side template inject
 CVE-2026-110592 (BottleCRM 0.30 through 1.14.5 contains an HTML injection vulnerability ...)
 	NOT-FOR-US: BottleCRM
 CVE-2026-110591 (OW2 ASM 1.4.3 before 9.11 contains an excessive resource consumption v ...)
-	- asm <unfixed>
+	- asm <unfixed> (bug #1151198)
 	NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/468
 	NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/4632a2283f1192fd0e93035661b49568a7cb8b6c (ASM_9_11)
 CVE-2026-110536 (A vulnerability was determined in D-Link DIR-868L 2.01b05. This impact ...)
@@ -3339,35 +3339,35 @@ CVE-2026-110536 (A vulnerability was determined in D-Link DIR-868L 2.01b05. This
 CVE-2026-110284 (The LifterLMS \u2013 WP LMS for eLearning, Online Courses, & Quizzes p ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-110270 (OW2 ASM 3.0 before 9.11 contains an uncontrolled memory allocation vul ...)
-	- asm <unfixed>
+	- asm <unfixed> (bug #1151198)
 	NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/466
 	NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/aef6bbd9d801177ece3e17f5dae13bfe65892a29 (ASM_9_11)
 CVE-2026-110263 (OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerabili ...)
-	- asm <unfixed>
+	- asm <unfixed> (bug #1151198)
 	NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/465
 	NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/a05e2081164fb799bf269362447227260439df7d (ASM_9_11)
 CVE-2026-110262 (OW2 ASM 3.1 before 9.11 contains an excessive memory allocation vulner ...)
-	- asm <unfixed>
+	- asm <unfixed> (bug #1151198)
 	NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/464
 	NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/0f8fa6126e76372dc91cae70f509d26075146d6c (ASM_9_11)
 CVE-2026-110261 (OW2 ASM 3.0 before 9.11 contains a denial of service vulnerability tha ...)
-	- asm <unfixed>
+	- asm <unfixed> (bug #1151198)
 	NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/463
 	NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/9465c9a5bc8a8ca104cb6c50eeb938c8957543b4 (ASM_9_11)
 CVE-2026-110260 (OW2 ASM 3.0 before 9.11 contains a quadratic memory allocation vulnera ...)
-	- asm <unfixed>
+	- asm <unfixed> (bug #1151198)
 	NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/461
 	NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/5b4c9dd2b92be982add6f11b64fcbbeb9ab09e13 (ASM_9_11)
 CVE-2026-110259 (OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerabili ...)
-	- asm <unfixed>
+	- asm <unfixed> (bug #1151198)
 	NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/459
 	NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/0cc889f35ba0ecb64fc49243cbe17524282c56d3 (ASM_9_11)
 CVE-2026-110258 (OW2 ASM 3.0 before 9.11 contains an excessive memory allocation vulner ...)
-	- asm <unfixed>
+	- asm <unfixed> (bug #1151198)
 	NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/458
 	NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/cefb8df53859777cc9e9dfbe3633cc28f694b7b7 (ASM_9_11)
 CVE-2026-110257 (OW2 ASM 5.0 before 9.11 contains an excessive memory allocation vulner ...)
-	- asm <unfixed>
+	- asm <unfixed> (bug #1151198)
 	NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/456
 	NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/3630baec81088bc344ccfdf0574885a4f209a097 (ASM_9_11)
 CVE-2026-110248 (Insertion of sensitive information into log files in the git_utils[.]p ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/df061a61a9f5b60cab8fd0feb3bde422416710d0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/df061a61a9f5b60cab8fd0feb3bde422416710d0
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261018/98c40efa/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list