[Git][security-tracker-team/security-tracker][master] Update tracking for CVE-2026-96424/lomiri-download-manager

Salvatore Bonaccorso (@carnil) carnil at debian.org
Mon Oct 19 19:51:57 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e939a89a by Salvatore Bonaccorso at 2026-10-19T20:50:19+02:00
Update tracking for  CVE-2026-96424/lomiri-download-manager

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2704,10 +2704,10 @@ CVE-2026-96425 (Incorrect DBus policy for lomiri-download-manager allows arbitra
 	NOTE: https://gitlab.com/ubports/development/core/lomiri-download-manager/-/commit/779dfd5bbeb5fe8877627b772e5024e40eda38aa (0.3.3)
 	NOTE: https://forums.ubports.com/topic/12671/security-advisory-arbitrary-root-command-execution-and-unauthenticated-arbitrary-file-read-as-root-in-lomiri-download-manager
 CVE-2026-96424 (Incorrect DBus policy for lomiri-upload-manager (part of lomiri-downlo ...)
-	- lomiri-upload-manager 0.3.3-1
-	[trixie] - lomiri-upload-manager <no-dsa> (Minor issue)
+	- lomiri-download-manager 0.3.3-1
+	[trixie] - lomiri-download-manager <no-dsa> (Minor issue)
 	NOTE: https://gitlab.com/ubports/development/core/lomiri-download-manager/-/work_items/18
-	NOTE: https://gitlab.com/ubports/development/core/lomiri-download-manager/-/commit/779dfd5bbeb5fe8877627b772e5024e40eda38aa
+	NOTE: https://gitlab.com/ubports/development/core/lomiri-download-manager/-/commit/779dfd5bbeb5fe8877627b772e5024e40eda38aa (0.3.3)
 	NOTE: https://forums.ubports.com/topic/12671/security-advisory-arbitrary-root-command-execution-and-unauthenticated-arbitrary-file-read-as-root-in-lomiri-download-manager
 CVE-2026-95859 (libp2p-rust is the official Rust language implementation of the libp2p ...)
 	NOT-FOR-US: libp2p-rust



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e939a89a1d48bf1ed2883cbe5cae3072c4bc1dcf

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e939a89a1d48bf1ed2883cbe5cae3072c4bc1dcf
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261019/3a0e4589/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list