[Git][security-tracker-team/security-tracker][master] bugnums

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
625aca6a by Moritz Muehlenhoff at 2026-10-27T21:13:07+01:00
bugnums

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2255,7 +2255,7 @@ CVE-2026-116538 (HtmlSanitizer before 9.2.1039 and 10.0 prereleases before 10.0.
 CVE-2026-116516 (Mattermost versions <=11.9 11.1.9 11.5.8 11.10.7.0 fail to validate Zo ...)
 	- mattermost-server <itp> (bug #823556)
 CVE-2026-116497 (A NULL pointer dereference vulnerability was found in gssproxy. When a ...)
-	- gssproxy <unfixed>
+	- gssproxy <unfixed> (bug #1152316)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2560642
 CVE-2026-116492 (Frappe CRM app before 1.89.1 contains a missing authorization vulnerab ...)
 	NOT-FOR-US: Frappe
@@ -2735,7 +2735,7 @@ CVE-2026-99088 (In the Linux kernel, the following vulnerability has been resolv
 	[trixie] - linux 6.12.113-1
 	NOTE: https://git.kernel.org/linus/3c6a4b11330fe424557538a98fca9f0a4c5bf313 (7.3-rc7)
 CVE-2026-107891
-	- musl <unfixed>
+	- musl <unfixed> (bug #1152311)
 	NOTE: https://www.openwall.com/lists/musl/2026/10/21/1
 	NOTE: https://git.musl-libc.org/cgit/musl/commit/?id=7813e9119eb5fe681b6750b8a033a0490bca0941
 CVE-2026-116228 (A vulnerability was found in 777genius agent-teams-ai up to 2.17.10. T ...)
@@ -2747,7 +2747,7 @@ CVE-2026-116224 (A vulnerability has been found in fr0tt benotes up to 2.8.1. Th
 CVE-2026-116223 (A flaw has been found in icret EasyImage up to 2.8.7. The impacted ele ...)
 	NOT-FOR-US: icret EasyImage
 CVE-2026-116124 (A security vulnerability has been detected in GNOME libgsf up to 1.14. ...)
-	- libgsf <unfixed>
+	- libgsf <unfixed> (bug #1152315)
 	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/libgsf/-/commit/a8e25560b74f84c3f86df6ca0ac59195fa5af68a (LIBGSF_1_14_60)
 CVE-2026-116123 (A weakness has been identified in NocoDB up to 2026.07.0. The affected ...)
 	NOT-FOR-US: NocoDB
@@ -11870,9 +11870,9 @@ CVE-2026-101296 (A missing critical step in authentication vulnerability in Apac
 	NOTE: https://github.com/apache/tomcat/commit/8fafc6f263311b7a0b7ce67477822175d1adf7ce (10.1.61)
 	NOTE: https://github.com/apache/tomcat/commit/42827afa4d073ac3d9f8b3cc81b857aa455bf1e6 (9.0.123)
 CVE-2026-101201 (A malformed header in the binary file fed to QBinaryJson::fromBinaryDa ...)
-	- qt6-5compat <unfixed>
-	- qtbase-opensource-src <unfixed>
-	- qtbase-opensource-src-gles <unfixed>
+	- qt6-5compat <unfixed> (bug #1152312)
+	- qtbase-opensource-src <unfixed> (bug #1152313)
+	- qtbase-opensource-src-gles <unfixed> (bug #1152314)
 	NOTE: https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-101201
 	NOTE: https://github.com/qt/qt5compat/commit/721ed576391211ca53ecdaaecf6dd41df7bc962e
 	NOTE: https://github.com/qt/qt5compat/commit/c0a495894d83a3c48055bd1e544f93147fc6ade1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/625aca6a233ad06121f4f15838f1b656a2ab1722

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/625aca6a233ad06121f4f15838f1b656a2ab1722
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261027/020c1e73/attachment.htm>