[Git][security-tracker-team/security-tracker][master] Update tracking for CVE-2026-96424/lomiri-download-manager
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Mon Oct 19 19:51:57 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
e939a89a by Salvatore Bonaccorso at 2026-10-19T20:50:19+02:00
Update tracking for CVE-2026-96424/lomiri-download-manager
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2704,10 +2704,10 @@ CVE-2026-96425 (Incorrect DBus policy for lomiri-download-manager allows arbitra
NOTE: https://gitlab.com/ubports/development/core/lomiri-download-manager/-/commit/779dfd5bbeb5fe8877627b772e5024e40eda38aa (0.3.3)
NOTE: https://forums.ubports.com/topic/12671/security-advisory-arbitrary-root-command-execution-and-unauthenticated-arbitrary-file-read-as-root-in-lomiri-download-manager
CVE-2026-96424 (Incorrect DBus policy for lomiri-upload-manager (part of lomiri-downlo ...)
- - lomiri-upload-manager 0.3.3-1
- [trixie] - lomiri-upload-manager <no-dsa> (Minor issue)
+ - lomiri-download-manager 0.3.3-1
+ [trixie] - lomiri-download-manager <no-dsa> (Minor issue)
NOTE: https://gitlab.com/ubports/development/core/lomiri-download-manager/-/work_items/18
- NOTE: https://gitlab.com/ubports/development/core/lomiri-download-manager/-/commit/779dfd5bbeb5fe8877627b772e5024e40eda38aa
+ NOTE: https://gitlab.com/ubports/development/core/lomiri-download-manager/-/commit/779dfd5bbeb5fe8877627b772e5024e40eda38aa (0.3.3)
NOTE: https://forums.ubports.com/topic/12671/security-advisory-arbitrary-root-command-execution-and-unauthenticated-arbitrary-file-read-as-root-in-lomiri-download-manager
CVE-2026-95859 (libp2p-rust is the official Rust language implementation of the libp2p ...)
NOT-FOR-US: libp2p-rust
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e939a89a1d48bf1ed2883cbe5cae3072c4bc1dcf
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e939a89a1d48bf1ed2883cbe5cae3072c4bc1dcf
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261019/3a0e4589/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list