[Git][security-tracker-team/security-tracker][master] Add new consul issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Oct 27 05:53:30 GMT 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
99266b6e by Salvatore Bonaccorso at 2026-10-27T06:49:51+01:00
Add new consul issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -447,7 +447,7 @@ CVE-2026-115905 (zip is a zip library for Rust that supports reading and writing
 	NOTE: https://github.com/zip-rs/zip2/security/advisories/GHSA-m665-v7pm-7grj
 	NOTE: Fixed by: https://github.com/zip-rs/zip2/commit/8068ab480ccf8daa7411424e365fcdbe6d09443e (v9.0.5)
 CVE-2026-115804 (HashiCorp Consul and Consul Enterprise are vulnerable to an authorizat ...)
-	TODO: check
+	- consul <removed>
 CVE-2026-115748 (**UNSUPPORTED WHEN ASSIGNED**Authorization bypass in Apache Vysper, al ...)
 	TODO: check
 CVE-2026-115721 (**UNSUPPORTED WHEN ASSIGNED**Unbounded allocation in XML parsing in Ap ...)
@@ -605,11 +605,11 @@ CVE-2026-106676 (qiujie mall-server 0.0.1-SNAPSHOT contains an integer overflow
 CVE-2026-105947 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
 	NOT-FOR-US: Logsign SIEM
 CVE-2026-105765 (HashiCorp Consul and Consul Enterprise 1.17.0 up to 2.0.4 are vulnerab ...)
-	TODO: check
+	- consul <removed>
 CVE-2026-105626 (HashiCorp Consul and Consul Enterprise are vulnerable to a denial of s ...)
-	TODO: check
+	- consul <removed>
 CVE-2026-105608 (HashiCorp Consul and Consul Enterprise are vulnerable to an authorizat ...)
-	TODO: check
+	- consul <removed>
 CVE-2026-104594 (libosmocore through 1.14.1 contains out-of-bounds reads in the IPA CCM ...)
 	TODO: check
 CVE-2026-104593 (osmo-msc through 1.15.0 contains a stack-based buffer overflow in deco ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/99266b6e694d20deb8c11b1501dc7f71b21c849c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/99266b6e694d20deb8c11b1501dc7f71b21c849c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261027/50d598b6/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list