[Git][security-tracker-team/security-tracker][master] Track fixing commits for clevis issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sun Oct 18 20:35:21 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b940feed by Salvatore Bonaccorso at 2026-10-18T21:34:57+02:00
Track fixing commits for clevis issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5555,15 +5555,19 @@ CVE-2026-110227 (Missing Authorization vulnerability in 10up Restricted Site Acc
 CVE-2026-109971 (A flaw was found in the clevis PKCS#11 pin. The clevis-decrypt-pkcs11  ...)
 	- clevis <unfixed> (bug #1150905)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2550363
+	NOTE: Fixed by: https://github.com/latchset/clevis/commit/a0b7f4ba9d0f803a525ae42aa3112aea57159b63 (v24)
 CVE-2026-109970 (A flaw was found in the clevis PKCS#11 pin. The clevis-luks-pkcs11-ask ...)
 	- clevis <unfixed> (bug #1150905)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2550362
+	NOTE: Fixed by: https://github.com/latchset/clevis/commit/3a77c12c2497869b143aa909c56954aa2a79fc20 (v24)
 CVE-2026-109969 (A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-s ...)
 	- clevis <unfixed> (bug #1150905)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2550361
+	NOTE: Fixed by: https://github.com/latchset/clevis/commit/5a53a404bca9dfd046da73089c6918658de6573d (v24)
 CVE-2026-109968 (A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-s ...)
 	- clevis <unfixed> (bug #1150905)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2462394
+	NOTE: Fixed by: https://github.com/latchset/clevis/commit/85e7ad3f6ae0a1c09c9d7f980acd9b7d7850a02a (v24)
 CVE-2026-109901 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-109527 (The Model Context Protocol Python SDK is the official Python SDK for M ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b940feedbfe3e4c19d84b0f31dbc91744b759147

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b940feedbfe3e4c19d84b0f31dbc91744b759147
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261018/87da441e/attachment.htm>


More information about the debian-security-tracker-commits mailing list