[Git][security-tracker-team/security-tracker][master] Add CVE-2026-115221/freeipa

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1d91a2ea by Salvatore Bonaccorso at 2026-10-23T17:35:16+02:00
Add CVE-2026-115221/freeipa

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -491,7 +491,9 @@ CVE-2026-115247 (A security vulnerability has been detected in subhajitkhan onli
 CVE-2026-115246 (A weakness has been identified in subhajitkhan online-clinic-managemen ...)
 	NOT-FOR-US: subhajitkhan online-clinic-management-system
 CVE-2026-115221 (A flaw was found in FreeIPA. An improper authorization check allows an ...)
-	TODO: check
+	- freeipa <unfixed> (unimportant)
+	NOTE: FreeIPA in Debian only builds the client packages, not the server
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2559043
 CVE-2026-115207 (A flaw was found in GNU patch. An attacker can achieve arbitrary file  ...)
 	TODO: check
 CVE-2026-114703 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1d91a2ea1f6c61b0670aeff4551600f70fb0b222

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1d91a2ea1f6c61b0670aeff4551600f70fb0b222
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261023/a0325649/attachment-0001.htm>