[Git][security-tracker-team/security-tracker][master] Add new batch of dnsmasq issue

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
eba830ae by Salvatore Bonaccorso at 2026-10-29T20:39:20+01:00
Add new batch of dnsmasq issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -29,17 +29,29 @@ CVE-2026-93571 (Szafir is vulnerable to Path Traversal in the uploaded filename.
 CVE-2026-93570 (Szafir and Szafir Weryfikuj\u0105ca are vulnerable to XML External Ent ...)
 	NOT-FOR-US: Szafir
 CVE-2026-93011 (A flaw was found in dnsmasq. After a reduction of internal domain-name ...)
-	TODO: check
+	- dnsmasq <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2536082
+	TODO: check upstream details
 CVE-2026-93010 (A flaw was found in dnsmasq. When DHCP leasequery is enabled without l ...)
-	TODO: check
+	- dnsmasq <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2536081
+	TODO: check upstream details
 CVE-2026-93009 (A flaw was found in dnsmasq. The DHCPv6 client hostname parser can rea ...)
-	TODO: check
+	- dnsmasq <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2536083
+	TODO: check upstream details
 CVE-2026-93008 (A flaw was found in dnsmasq. When following a CNAME in a DNS response, ...)
-	TODO: check
+	- dnsmasq <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2536079
+	TODO: check upstream details
 CVE-2026-93007 (A flaw was found in dnsmasq. The TCP DNS service uses a small fixed po ...)
-	TODO: check
+	- dnsmasq <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2536076
+	TODO: check upstream details
 CVE-2026-93006 (A flaw was found in dnsmasq. The TFTP server can serve the wrong file  ...)
-	TODO: check
+	- dnsmasq <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2536075
+	TODO: check upstream details
 CVE-2026-92086 (The MW WP Form plugin for WordPress is vulnerable to Sensitive Informa ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-91153 (The Everest Forms \u2013 Contact Form, Payment Form, Quiz, Survey & Cu ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eba830ae834960cdac7eb096c6c1bb7ad680a55a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eba830ae834960cdac7eb096c6c1bb7ad680a55a
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261029/4e9117f4/attachment-0001.htm>