[Git][security-tracker-team/security-tracker][master] trixie triage

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
36c66989 by Moritz Muehlenhoff at 2026-10-25T21:18:43+01:00
trixie triage

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -682,6 +682,7 @@ CVE-2026-115877 (Twisted is an event-based framework for internet applications,
 	NOTE: Fixed by: https://github.com/twisted/twisted/commit/1616f702d36eda8990a5a5b22ad70fab140a7eb1 (twisted-26.10.0rc1)
 CVE-2026-115863 (ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Rep ...)
 	- connman <unfixed>
+	[trixie] - connman <no-dsa> (Minor issue)
 	NOTE: Introduced with: https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=bb06c47101ca243fa5c04fb4b03fe2a12420d280
 	NOTE: https://lore.kernel.org/connman/179274561161.81299.4579745057858200074@pm.me/
 CVE-2026-115845 (An incomplete list of disallowed inputs in the Python code validator o ...)
@@ -2576,11 +2577,13 @@ CVE-2026-114611 (OCO-Server is a self-hosted endpoint management application for
 	NOT-FOR-US: OCO-Server
 CVE-2026-114610 (fpdf2 is a PDF creation library for Python. From 2.5.0 until 2.8.8, fp ...)
 	- fpdf2 2.8.8-1
+	[trixie] - fpdf2 <no-dsa> (Minor issue)
 	NOTE: https://github.com/py-pdf/fpdf2/security/advisories/GHSA-wqw6-wpr3-45rh
 	NOTE: https://github.com/py-pdf/fpdf2/pull/1889
 	NOTE: Fixed by: https://github.com/py-pdf/fpdf2/commit/d7bd1061205d50da6a541dadfdb9d66beb763f2f (2.8.8)
 CVE-2026-114609 (fpdf2 is a PDF creation library for Python. Prior to 2.8.8, fpdf2's sh ...)
 	- fpdf2 2.8.8-1
+	[trixie] - fpdf2 <no-dsa> (Minor issue)
 	NOTE: https://github.com/py-pdf/fpdf2/security/advisories/GHSA-rw7v-4hrq-x6r9
 	NOTE: https://github.com/py-pdf/fpdf2/pull/1824
 	NOTE: Fixed by: https://github.com/py-pdf/fpdf2/commit/0d27190a8c907e02ebe9cd881471a14d0622b432 (2.8.8)
@@ -9253,8 +9256,9 @@ CVE-2026-112302 (A weakness has been identified in kiwilan php-archive up to 2.3
 CVE-2026-112301 (A security flaw has been discovered in orbitale imagemagick-php up to  ...)
 	NOT-FOR-US: orbitale imagemagick-php
 CVE-2026-112300 (A vulnerability was identified in DiffSK configobj up to 5.0.9. Affect ...)
-	- configobj <unfixed>
+	- configobj <unfixed> (unimportant)
 	NOTE: https://github.com/DiffSK/configobj/issues/281
+	NOTE: No security impact
 CVE-2026-112299 (A vulnerability was determined in smrealms smr up to f40380c017bc35cd8 ...)
 	NOT-FOR-US: smrealms smr
 CVE-2026-112297 (A flaw has been found in ptbsare anx-calibre-manager up to 1.13.12. Th ...)
@@ -13816,6 +13820,7 @@ CVE-2026-111593
 	REJECTED
 CVE-2026-111581 (A flaw was found in libblockdev. The bd_fs_ntfs_set_label() and bd_fs_ ...)
 	- libblockdev <unfixed>
+	[trixie] - libblockdev <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2554104
 CVE-2026-111555 (A flaw was found in luksmeta. Improper boundary validation of metadata ...)
 	- luksmeta 10-2 (bug #1151196)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/36c669898d9e94526018737a8026ae999355f783

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/36c669898d9e94526018737a8026ae999355f783
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261025/eea704e1/attachment.htm>