[Git][security-tracker-team/security-tracker][master] Add references for qemu issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5b04959a by Salvatore Bonaccorso at 2026-10-29T13:20:06+01:00
Add references for qemu issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3,18 +3,42 @@ CVE-2026-XXXX [GHSA-p8g6-qw5j-8cgc: Local users can run code as root when Tigris
 	NOTE: https://github.com/creativeheadz/tigris/security/advisories/GHSA-p8g6-qw5j-8cgc
 CVE-2026-7180
 	- qemu 1:11.1.3+ds-1
+	NOTE: https://gitlab.com/qemu-project/qemu/-/work_items/3729
+	NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/e118248d9c92632204d5fda61fbf629b9ef856f4 (v11.1.3)
+	NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/1492ccd15a3e0edbe66fde31c80653f699fe455f (v10.0.15)
 CVE-2026-18204
 	- qemu 1:11.1.3+ds-1
+	NOTE: https://gitlab.com/qemu-project/qemu/-/work_items/4086
+	NOTE: Introduced with: https://gitlab.com/qemu-project/qemu/-/commit/367071447ec5b0dabc5452384bbeb62371838112 (v0.15.0-rc0)
+	NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/43a624d2753d73116db570e5bb238b9b5c9bb016 (v11.1.3)
+	NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/74ee55b345c38d3f36965ac83c1b5fc5b6c49ab8 (v10.0.15)
 CVE-2026-18410
 	- qemu 1:11.1.3+ds-1
+	NOTE: https://gitlab.com/qemu-project/qemu/-/work_items/3997
+	NOTE: Introduced with: https://gitlab.com/qemu-project/qemu/-/commit/367071447ec5b0dabc5452384bbeb62371838112 (v0.15.0-rc0)
+	NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/67cd05f4bb6090bea0d97cd2534d5e7c2a3e3e9a (v11.1.3)
+	NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/d5b0c53ef65ab2b0da9a42d77843b268459ccbe1 (v10.0.15)
 CVE-2026-18609
 	- qemu 1:11.1.3+ds-1
+	NOTE: https://gitlab.com/qemu-project/qemu/-/work_items/4128
+	NOTE: Introduced with: https://gitlab.com/qemu-project/qemu/-/commit/367071447ec5b0dabc5452384bbeb62371838112 (v0.15.0-rc0)
+	NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/4823a3093b3542834e1a4103a37f4ed9f4ad3c44 (v11.1.3)
+	NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/b4db9809f874eb6ad21d35d5b84337468d0d2cb3 (v10.0.15)
 CVE-2026-97889
 	- qemu 1:11.1.3+ds-1
+	NOTE: https://gitlab.com/qemu-project/qemu/-/work_items/4579
+	NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/64c20eeb9962957c01ab993177a9c07890f73930 (v11.1.3)
+	NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/b2ddd7f25f68dbeeef656a9a839991c0caf55135 (v10.0.15)
 CVE-2026-101291
 	- qemu 1:11.1.3+ds-1
+	NOTE: Introduced with: https://gitlab.com/qemu-project/qemu/-/commit/2d1d0e70cf3eadca967427e71b2c5c7d031bc5c8 (v2.6.0-rc0)
+	NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/68df2cefcfe6eb3df4c0531cea4d9125742bc9df (v11.1.3)
+	NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/fddbc5808a066f2204089dddd0b41456ae1cfdb2 (v10.0.15)
 CVE-2026-111819
 	- qemu 1:11.1.3+ds-1
+	NOTE: https://gitlab.com/qemu-project/qemu/-/work_items/4625
+	NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/d8cc56e9a28d4d95b43b681e373b77f6ec247a7e (v11.1.3)
+	NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/bbe891ad260612c04f9a41af533ac2a931ce3247 (v10.0.15)
 CVE-2026-XXXX [Security issues fixed in 7.1.4 wordpress release]
 	- wordpress 7.1.4+dfsg1-1 (bug #1152426)
 	NOTE: https://wordpress.org/news/2026/10/wordpress-7-1-4/



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5b04959ae4aff27e1ad14759964746efe9237cbb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5b04959ae4aff27e1ad14759964746efe9237cbb
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261029/dbf7670e/attachment.htm>