[Git][security-tracker-team/security-tracker][master] 2 commits: Add new incus issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
74e092ef by Salvatore Bonaccorso at 2026-10-30T04:50:05+01:00
Add new incus issues

- - - - -
bb9073fa by Salvatore Bonaccorso at 2026-10-30T04:57:46+01:00
Update status for incus in trixie for various GHSAs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,80 @@
+CVE-2026-XXXX [GHSA-5pgx-q9xx-j3qv]
+	- incus 7.0.2-3
+	NOTE: https://github.com/lxc/incus/pull/4293
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-5pgx-q9xx-j3qv
+CVE-2026-XXXX [GHSA-jcw9-v2ff-8m79]
+	- incus 7.0.2-3
+	NOTE: https://github.com/lxc/incus/pull/4293
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-jcw9-v2ff-8m79
+CVE-2026-XXXX [GHSA-xg75-xf37-cph9]
+	- incus 7.0.2-3
+	NOTE: https://github.com/lxc/incus/pull/4293
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-xg75-xf37-cph9
+CVE-2026-XXXX [GHSA-p45f-gqqj-6qq3]
+	- incus 7.0.2-3
+	NOTE: https://github.com/lxc/incus/pull/4293
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-p45f-gqqj-6qq3
+CVE-2026-XXXX [GHSA-q9fc-p923-6vp7]
+	- incus 7.0.2-3
+	[trixie] - incus <not-affected> (Vulnerable code not present)
+	NOTE: https://github.com/lxc/incus/pull/4293
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-q9fc-p923-6vp7
+CVE-2026-XXXX [GHSA-cwg9-8mc4-hf7j]
+	- incus 7.0.2-3
+	NOTE: https://github.com/lxc/incus/pull/4293
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-cwg9-8mc4-hf7j
+CVE-2026-XXXX [GHSA-5c64-j5m6-8433]
+	- incus 7.0.2-3
+	NOTE: https://github.com/lxc/incus/pull/4293
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-5c64-j5m6-8433
+CVE-2026-XXXX [GHSA-3wxw-5gh2-j2x2]
+	- incus 7.0.2-3
+	[trixie] - incus <not-affected> (Vulnerable code not present)
+	NOTE: https://github.com/lxc/incus/pull/4293
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-3wxw-5gh2-j2x2
+CVE-2026-XXXX [GHSA-3rgf-297m-775x]
+	- incus 7.0.2-3
+	[trixie] - incus <no-dsa> (Intrusive change to backport, wait if upstream backports new NBD logic into stable-6.0)
+	NOTE: https://github.com/lxc/incus/pull/4293
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-3rgf-297m-775x
+CVE-2026-XXXX [GHSA-9c46-v3hw-v6m8]
+	- incus 7.0.2-3
+	NOTE: https://github.com/lxc/incus/pull/4293
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-9c46-v3hw-v6m8
+CVE-2026-XXXX [GHSA-h2j8-4crh-vhfc]
+	- incus 7.0.2-3
+	NOTE: https://github.com/lxc/incus/pull/4293
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-h2j8-4crh-vhfc
+CVE-2026-XXXX [GHSA-8r3h-vc36-6xpx]
+	- incus 7.0.2-3
+	NOTE: https://github.com/lxc/incus/pull/4293
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-8r3h-vc36-6xpx
+CVE-2026-XXXX [GHSA-v736-5xp3-jghf]
+	- incus 7.0.2-3
+	[trixie] - incus <not-affected> (Vulnerable code not present)
+	NOTE: https://github.com/lxc/incus/pull/4293
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-v736-5xp3-jghf
+CVE-2026-XXXX [GHSA-x6pw-mh5w-pq73]
+	- incus 7.0.2-3
+	NOTE: https://github.com/lxc/incus/pull/4293
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-x6pw-mh5w-pq73
+CVE-2026-XXXX [GHSA-pf5w-m8m6-5265]
+	- incus 7.0.2-3
+	NOTE: https://github.com/lxc/incus/pull/4293
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-pf5w-m8m6-5265
+CVE-2026-XXXX [GHSA-f7xp-22ph-v444]
+	- incus 7.0.2-3
+	NOTE: https://github.com/lxc/incus/pull/4293
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-f7xp-22ph-v444
+CVE-2026-XXXX [GHSA-9f75-5fjw-5jvv]
+	- incus 7.0.2-3
+	NOTE: https://github.com/lxc/incus/pull/4293
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-9f75-5fjw-5jvv
+CVE-2026-XXXX [GHSA-8mgx-h4v8-xqv2]
+	- incus 7.0.2-3
+	[trixie] - incus <not-affected> (Vulnerable code not present)
+	NOTE: https://github.com/lxc/incus/pull/4293
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-8mgx-h4v8-xqv2
 CVE-2026-108270
 	- request-tracker5 <unfixed>
 	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/53f516d402fc84fe60aebfe7e26e0cf302c5c532...bb9073fac98988540bd0ee7f94bf850bde11beea

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/53f516d402fc84fe60aebfe7e26e0cf302c5c532...bb9073fac98988540bd0ee7f94bf850bde11beea
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261030/187e1ae6/attachment.htm>