[Git][security-tracker-team/security-tracker][master] Add new CouchDB issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c475f2c5 by Salvatore Bonaccorso at 2026-10-21T09:02:03+02:00
Add new CouchDB issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -79,13 +79,13 @@ CVE-2026-91057 (`_gx_multi_line_text_view_display_info_get()` reads one byte pas
 CVE-2026-91041 (Mounting an attacker-controlled FAT image with fault tolerance enabled ...)
 	NOT-FOR-US: Eclipse
 CVE-2026-90800 (Missing authorisation checks in chttpd in Apache CouchDB 3.5.2 and bel ...)
-	TODO: check
+	- couchdb <removed>
 CVE-2026-90799 (Unsafe binary deserialisation in chttpd in Apache CouchDB 3.5.2 and be ...)
-	TODO: check
+	- couchdb <removed>
 CVE-2026-90798 (A missing circuit-breaker in the replicator in Apache CouchDB 3.5.2 an ...)
-	TODO: check
+	- couchdb <removed>
 CVE-2026-90797 (An unlimited gzip decompression routine in chttpd in Apache CouchDB 3. ...)
-	TODO: check
+	- couchdb <removed>
 CVE-2026-88041 (Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer i ...)
 	- tomcat11 <unfixed>
 	- tomcat10 <unfixed>
@@ -95,7 +95,7 @@ CVE-2026-88041 (Incomplete cleanup vulnerability in Apache Tomcat allowed an tra
 	NOTE: https://github.com/apache/tomcat/commit/395bcafcfcf2e1cff451a5785361679931b49a79 (10.1.61)
 	NOTE: https://github.com/apache/tomcat/commit/885985272887e9a5d47245cec240a5d1d0e39b5b (9.0.123)
 CVE-2026-86471 (An unvalidated runtime configuration value in Apache CouchDB 3.5.2 and ...)
-	TODO: check
+	- couchdb <removed>
 CVE-2026-85267 (A Cross-Site WebSocket Hijacking vulnerability in Cloud Shell prior to ...)
 	NOT-FOR-US: Google Cloud Platform
 CVE-2026-80353 (Time-of-check time-of-use (TOCTOU) race condition vulnerability in Apa ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c475f2c5a3660a3eb783590cebd4b05cdb00d352

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c475f2c5a3660a3eb783590cebd4b05cdb00d352
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261021/578bdc59/attachment.htm>