[Git][security-tracker-team/security-tracker][master] Add CVE-2026-112006/python-opentelemetry

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
afe9f1fc by Salvatore Bonaccorso at 2026-10-19T16:17:58+02:00
Add CVE-2026-112006/python-opentelemetry

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -242,7 +242,8 @@ CVE-2026-112008 (libmng through 2.0.3 contains a heap-based buffer overflow vuln
 CVE-2026-112007 (Schism Tracker through 20260524 contains a heap out-of-bounds write vu ...)
 	TODO: check
 CVE-2026-112006 (OpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45 ...)
-	TODO: check
+	- python-opentelemetry 1.45.1-1
+	NOTE: Fixed by: https://github.com/open-telemetry/opentelemetry-python/commit/89cc68b9ea7e15969b4f042d63397bdc74a3d60e (v1.45.0)
 CVE-2026-112005 (WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability t ...)
 	TODO: check
 CVE-2026-112004 (Teable before 2026-10-12T12-45-53Z.3331 contains an authorization bypa ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/afe9f1fc2d28ed8e86b6edb2dc4a2223b81c4959

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/afe9f1fc2d28ed8e86b6edb2dc4a2223b81c4959
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261019/a27324ba/attachment.htm>