[Git][security-tracker-team/security-tracker][master] trixie triage
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Fri Oct 23 21:06:11 BST 2026
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
1edbaf39 by Moritz Muehlenhoff at 2026-10-23T22:01:43+02:00
trixie triage
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -7118,6 +7118,7 @@ CVE-2026-113274 (Use after free in ReadingMode in Google Chrome prior to 156.0.8
- chromium 156.0.8078.47-1
CVE-2026-112202 (Imager::File::GIF versions before 1.006 for Perl allow out-of-bounds r ...)
- libimager-perl 1.040+dfsg-1 (bug #1151664)
+ [trixie] - libimager-perl <no-dsa> (Minor issue)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44514169/
NOTE: https://github.com/tonycoz/imager/security/advisories/GHSA-v4hp-5h6w-9897
NOTE: Fixed by: https://github.com/tonycoz/imager/commit/dec96f12b3d8a7fd94e86264953a5e4919dd6036 (v1.040)
@@ -9257,7 +9258,9 @@ CVE-2026-16460 (A flaw was found in bootc and ostree. Already-staged deployments
NOT-FOR-US: bootc
CVE-2026-112112 (An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing ...)
- bird3 <unfixed>
+ [trixie] - bird3 <no-dsa> (Minor issue)
- bird2 <unfixed>
+ [trixie] - bird2 <no-dsa> (Minor issue)
NOTE: Fixed by: https://gitlab.nic.cz/labs/bird/-/commit/7cf75587b6f38b87849fe192bf5dfd124b7702bc
CVE-2026-112111 (The Bootstrap Shortcodes plugin for WordPress before 3.4.6 is vulnerab ...)
NOT-FOR-US: WordPress plugin
@@ -9313,6 +9316,7 @@ CVE-2026-112037 (A flaw has been found in diem-project diem up to 116974edfb9a5b
NOT-FOR-US: diem-project diem
CVE-2026-112036 (A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impac ...)
- mupdf <unfixed>
+ [trixie] - mupdf <no-dsa> (Minor issue)
NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=709768
NOTE: Fixed by: http://www.ghostscript.com/cgi-bin/findgit.cgi?3984925b660afb8a781ddf504021e91be1bc671e
CVE-2026-112035 (A security vulnerability has been detected in aircheng-org iWebShop-5 ...)
@@ -9425,10 +9429,12 @@ CVE-2026-112047 (OneUptime 14.0.2 before 14.0.69 contains an incorrect authoriza
NOT-FOR-US: OneUptime
CVE-2026-112046 (OW2 ASM 9.11 before 9.11.1 contains an infinite loop vulnerability in ...)
- asm 9.11.1-1
+ [trixie] - asm <no-dsa> (Minor issue)
NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/480
NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/713dee5466d734de2af76e416893c28f06d2e2bc (ASM_9_11_1)
CVE-2026-112021 (snac2 before 2.93 contains a heap-based buffer overflow vulnerability ...)
- snac2 2.93-1
+ [trixie] - snac2 <no-dsa> (Minor issue)
NOTE: Fixed by: https://codeberg.org/grunfink/snac2/commit/ec2c5c2046e0381bc942ec5d0d05ec861fe377e7 (2.93)
CVE-2026-112020 (LodePNG through 20261006 contains a heap out-of-bounds read vulnerabil ...)
NOT-FOR-US: LodePNG
@@ -13826,6 +13832,7 @@ CVE-2026-111137 (libsmi through 0.5.0 contains an out-of-bounds write vulnerabil
- libsmi <undetermined>
CVE-2026-111136 (libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnera ...)
- libinstpatch <unfixed>
+ [trixie] - libinstpatch <no-dsa> (Minor issue)
NOTE: https://github.com/swami/libinstpatch/pull/87
NOTE: Fixed by: https://github.com/swami/libinstpatch/commit/74537412a68e5a4a77d01e7d66c824087d0e2cd9 (v1.1.8)
CVE-2026-111135 (libfwsi through 20260522 contains a heap out-of-bounds read vulnerabil ...)
@@ -15228,6 +15235,7 @@ CVE-2026-110592 (BottleCRM 0.30 through 1.14.5 contains an HTML injection vulner
NOT-FOR-US: BottleCRM
CVE-2026-110591 (OW2 ASM 1.4.3 before 9.11 contains an excessive resource consumption v ...)
- asm 9.11.1-1 (bug #1151198)
+ [trixie] - asm <no-dsa> (Minor issue)
NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/468
NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/4632a2283f1192fd0e93035661b49568a7cb8b6c (ASM_9_11)
CVE-2026-110536 (A vulnerability was determined in D-Link DIR-868L 2.01b05. This impact ...)
@@ -15236,34 +15244,42 @@ CVE-2026-110284 (The LifterLMS \u2013 WP LMS for eLearning, Online Courses, & Qu
NOT-FOR-US: WordPress plugin
CVE-2026-110270 (OW2 ASM 3.0 before 9.11 contains an uncontrolled memory allocation vul ...)
- asm 9.11.1-1 (bug #1151198)
+ [trixie] - asm <no-dsa> (Minor issue)
NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/466
NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/aef6bbd9d801177ece3e17f5dae13bfe65892a29 (ASM_9_11)
CVE-2026-110263 (OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerabili ...)
- asm 9.11.1-1 (bug #1151198)
+ [trixie] - asm <no-dsa> (Minor issue)
NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/465
NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/a05e2081164fb799bf269362447227260439df7d (ASM_9_11)
CVE-2026-110262 (OW2 ASM 3.1 before 9.11 contains an excessive memory allocation vulner ...)
- asm 9.11.1-1 (bug #1151198)
+ [trixie] - asm <no-dsa> (Minor issue)
NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/464
NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/0f8fa6126e76372dc91cae70f509d26075146d6c (ASM_9_11)
CVE-2026-110261 (OW2 ASM 3.0 before 9.11 contains a denial of service vulnerability tha ...)
- asm 9.11.1-1 (bug #1151198)
+ [trixie] - asm <no-dsa> (Minor issue)
NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/463
NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/9465c9a5bc8a8ca104cb6c50eeb938c8957543b4 (ASM_9_11)
CVE-2026-110260 (OW2 ASM 3.0 before 9.11 contains a quadratic memory allocation vulnera ...)
- asm 9.11.1-1 (bug #1151198)
+ [trixie] - asm <no-dsa> (Minor issue)
NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/461
NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/5b4c9dd2b92be982add6f11b64fcbbeb9ab09e13 (ASM_9_11)
CVE-2026-110259 (OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerabili ...)
- asm 9.11.1-1 (bug #1151198)
+ [trixie] - asm <no-dsa> (Minor issue)
NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/459
NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/0cc889f35ba0ecb64fc49243cbe17524282c56d3 (ASM_9_11)
CVE-2026-110258 (OW2 ASM 3.0 before 9.11 contains an excessive memory allocation vulner ...)
- asm 9.11.1-1 (bug #1151198)
+ [trixie] - asm <no-dsa> (Minor issue)
NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/458
NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/cefb8df53859777cc9e9dfbe3633cc28f694b7b7 (ASM_9_11)
CVE-2026-110257 (OW2 ASM 5.0 before 9.11 contains an excessive memory allocation vulner ...)
- asm 9.11.1-1 (bug #1151198)
+ [trixie] - asm <no-dsa> (Minor issue)
NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/456
NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/3630baec81088bc344ccfdf0574885a4f209a097 (ASM_9_11)
CVE-2026-110248 (Insertion of sensitive information into log files in the git_utils[.]p ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1edbaf394263677b4afed458169b6679e99da051
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1edbaf394263677b4afed458169b6679e99da051
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261023/03e5849b/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list