[Git][security-tracker-team/security-tracker][master] Track fix for CVE-2026-109976/clevis

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2b137ae2 by Salvatore Bonaccorso at 2026-10-18T21:31:57+02:00
Track fix for CVE-2026-109976/clevis

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -10648,6 +10648,7 @@ CVE-2026-10759 (A flaw in Portal for ArcGIS could allow LDAP injection through a
 CVE-2026-109976 (A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-s ...)
 	- clevis <unfixed> (bug #1150905)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2550375
+	NOTE: Fixed by: https://github.com/latchset/clevis/commit/f459bc0b9258d3401bda7c46f1a036db874b130d (v24)
 CVE-2026-109967 (yt-dlp-web-ui through 4.0.0 contains a NULL pointer dereference vulner ...)
 	NOT-FOR-US: yt-dlp-web-ui
 CVE-2026-109966 (yt-dlp-web-ui through 4.0.0 contains an argument injection vulnerabili ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2b137ae20a83b4e10136563a04ae25dbc0a49963

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2b137ae20a83b4e10136563a04ae25dbc0a49963
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261018/13d9d31f/attachment.htm>