[Git][security-tracker-team/security-tracker][master] asm fixed in sid

Sun Oct 18 22:08:48 BST 2026


Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1a084a7a by Moritz Muehlenhoff at 2026-10-18T23:08:11+02:00
asm fixed in sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -55,7 +55,7 @@ CVE-2026-112048 (libspatialite through 5.1.0 fails to validate the polygon ring
 CVE-2026-112047 (OneUptime 14.0.2 before 14.0.69 contains an incorrect authorization vu ...)
 	NOT-FOR-US: OneUptime
 CVE-2026-112046 (OW2 ASM 9.11 before 9.11.1 contains an infinite loop vulnerability in  ...)
-	- asm <unfixed>
+	- asm 9.11.1-1
 	NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/480
 	NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/713dee5466d734de2af76e416893c28f06d2e2bc (ASM_9_11_1)
 CVE-2026-112021 (snac2 before 2.93 contains a heap-based buffer overflow vulnerability  ...)
@@ -5530,7 +5530,7 @@ CVE-2026-110593 (BottleCRM through 1.14.5 contains a server-side template inject
 CVE-2026-110592 (BottleCRM 0.30 through 1.14.5 contains an HTML injection vulnerability ...)
 	NOT-FOR-US: BottleCRM
 CVE-2026-110591 (OW2 ASM 1.4.3 before 9.11 contains an excessive resource consumption v ...)
-	- asm <unfixed> (bug #1151198)
+	- asm 9.11.1-1 (bug #1151198)
 	NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/468
 	NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/4632a2283f1192fd0e93035661b49568a7cb8b6c (ASM_9_11)
 CVE-2026-110536 (A vulnerability was determined in D-Link DIR-868L 2.01b05. This impact ...)
@@ -5538,35 +5538,35 @@ CVE-2026-110536 (A vulnerability was determined in D-Link DIR-868L 2.01b05. This
 CVE-2026-110284 (The LifterLMS \u2013 WP LMS for eLearning, Online Courses, & Quizzes p ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-110270 (OW2 ASM 3.0 before 9.11 contains an uncontrolled memory allocation vul ...)
-	- asm <unfixed> (bug #1151198)
+	- asm 9.11.1-1 (bug #1151198)
 	NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/466
 	NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/aef6bbd9d801177ece3e17f5dae13bfe65892a29 (ASM_9_11)
 CVE-2026-110263 (OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerabili ...)
-	- asm <unfixed> (bug #1151198)
+	- asm 9.11.1-1 (bug #1151198)
 	NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/465
 	NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/a05e2081164fb799bf269362447227260439df7d (ASM_9_11)
 CVE-2026-110262 (OW2 ASM 3.1 before 9.11 contains an excessive memory allocation vulner ...)
-	- asm <unfixed> (bug #1151198)
+	- asm 9.11.1-1 (bug #1151198)
 	NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/464
 	NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/0f8fa6126e76372dc91cae70f509d26075146d6c (ASM_9_11)
 CVE-2026-110261 (OW2 ASM 3.0 before 9.11 contains a denial of service vulnerability tha ...)
-	- asm <unfixed> (bug #1151198)
+	- asm 9.11.1-1 (bug #1151198)
 	NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/463
 	NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/9465c9a5bc8a8ca104cb6c50eeb938c8957543b4 (ASM_9_11)
 CVE-2026-110260 (OW2 ASM 3.0 before 9.11 contains a quadratic memory allocation vulnera ...)
-	- asm <unfixed> (bug #1151198)
+	- asm 9.11.1-1 (bug #1151198)
 	NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/461
 	NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/5b4c9dd2b92be982add6f11b64fcbbeb9ab09e13 (ASM_9_11)
 CVE-2026-110259 (OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerabili ...)
-	- asm <unfixed> (bug #1151198)
+	- asm 9.11.1-1 (bug #1151198)
 	NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/459
 	NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/0cc889f35ba0ecb64fc49243cbe17524282c56d3 (ASM_9_11)
 CVE-2026-110258 (OW2 ASM 3.0 before 9.11 contains an excessive memory allocation vulner ...)
-	- asm <unfixed> (bug #1151198)
+	- asm 9.11.1-1 (bug #1151198)
 	NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/458
 	NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/cefb8df53859777cc9e9dfbe3633cc28f694b7b7 (ASM_9_11)
 CVE-2026-110257 (OW2 ASM 5.0 before 9.11 contains an excessive memory allocation vulner ...)
-	- asm <unfixed> (bug #1151198)
+	- asm 9.11.1-1 (bug #1151198)
 	NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/456
 	NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/3630baec81088bc344ccfdf0574885a4f209a097 (ASM_9_11)
 CVE-2026-110248 (Insertion of sensitive information into log files in the git_utils[.]p ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1a084a7a1841e14daf290cac424e8e6e193f5017

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1a084a7a1841e14daf290cac424e8e6e193f5017
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261018/ab2dd62d/attachment-0001.htm>
