[Git][security-tracker-team/security-tracker][master] Add new consul issues
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Oct 27 05:53:30 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
99266b6e by Salvatore Bonaccorso at 2026-10-27T06:49:51+01:00
Add new consul issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -447,7 +447,7 @@ CVE-2026-115905 (zip is a zip library for Rust that supports reading and writing
NOTE: https://github.com/zip-rs/zip2/security/advisories/GHSA-m665-v7pm-7grj
NOTE: Fixed by: https://github.com/zip-rs/zip2/commit/8068ab480ccf8daa7411424e365fcdbe6d09443e (v9.0.5)
CVE-2026-115804 (HashiCorp Consul and Consul Enterprise are vulnerable to an authorizat ...)
- TODO: check
+ - consul <removed>
CVE-2026-115748 (**UNSUPPORTED WHEN ASSIGNED**Authorization bypass in Apache Vysper, al ...)
TODO: check
CVE-2026-115721 (**UNSUPPORTED WHEN ASSIGNED**Unbounded allocation in XML parsing in Ap ...)
@@ -605,11 +605,11 @@ CVE-2026-106676 (qiujie mall-server 0.0.1-SNAPSHOT contains an integer overflow
CVE-2026-105947 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
NOT-FOR-US: Logsign SIEM
CVE-2026-105765 (HashiCorp Consul and Consul Enterprise 1.17.0 up to 2.0.4 are vulnerab ...)
- TODO: check
+ - consul <removed>
CVE-2026-105626 (HashiCorp Consul and Consul Enterprise are vulnerable to a denial of s ...)
- TODO: check
+ - consul <removed>
CVE-2026-105608 (HashiCorp Consul and Consul Enterprise are vulnerable to an authorizat ...)
- TODO: check
+ - consul <removed>
CVE-2026-104594 (libosmocore through 1.14.1 contains out-of-bounds reads in the IPA CCM ...)
TODO: check
CVE-2026-104593 (osmo-msc through 1.15.0 contains a stack-based buffer overflow in deco ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/99266b6e694d20deb8c11b1501dc7f71b21c849c
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/99266b6e694d20deb8c11b1501dc7f71b21c849c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261027/50d598b6/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list