[Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Oct 30 05:20:17 GMT 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c7d814e6 by Salvatore Bonaccorso at 2026-10-30T06:19:51+01:00
Add Debian bug references for various issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
 CVE-2026-115943
-	- libspreadsheet-xlsx-perl <unfixed>
+	- libspreadsheet-xlsx-perl <unfixed> (bug #1152516)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/44746764/
 CVE-2026-XXXX [GHSA-5pgx-q9xx-j3qv]
 	- incus 7.0.2-3
@@ -79,115 +79,115 @@ CVE-2026-XXXX [GHSA-8mgx-h4v8-xqv2]
 	NOTE: https://github.com/lxc/incus/pull/4293
 	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-8mgx-h4v8-xqv2
 CVE-2026-108270
-	- request-tracker5 <unfixed>
+	- request-tracker5 <unfixed> (bug #1152514)
 	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
 	TODO: check details from upstream and affected versions
 CVE-2026-108279
-	- request-tracker5 <unfixed>
+	- request-tracker5 <unfixed> (bug #1152514)
 	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
 	TODO: check details from upstream and affected versions
 CVE-2026-108278
-	- request-tracker5 <unfixed>
+	- request-tracker5 <unfixed> (bug #1152514)
 	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
 	TODO: check details from upstream and affected versions
 CVE-2026-108275
-	- request-tracker5 <unfixed>
+	- request-tracker5 <unfixed> (bug #1152514)
 	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
 	TODO: check details from upstream and affected versions
 CVE-2026-108353
-	- request-tracker5 <unfixed>
+	- request-tracker5 <unfixed> (bug #1152514)
 	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
 	TODO: check details from upstream and affected versions
 CVE-2026-108363
-	- request-tracker5 <unfixed>
+	- request-tracker5 <unfixed> (bug #1152514)
 	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
 	TODO: check details from upstream and affected versions
 CVE-2026-108271
-	- request-tracker5 <unfixed>
+	- request-tracker5 <unfixed> (bug #1152514)
 	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
 	TODO: check details from upstream and affected versions
 CVE-2026-108272
-	- request-tracker5 <unfixed>
+	- request-tracker5 <unfixed> (bug #1152514)
 	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
 	TODO: check details from upstream and affected versions
 CVE-2026-108273
-	- request-tracker5 <unfixed>
+	- request-tracker5 <unfixed> (bug #1152514)
 	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
 	TODO: check details from upstream and affected versions
 CVE-2026-108276
-	- request-tracker5 <unfixed>
+	- request-tracker5 <unfixed> (bug #1152514)
 	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
 	TODO: check details from upstream and affected versions
 CVE-2026-108277
-	- request-tracker5 <unfixed>
+	- request-tracker5 <unfixed> (bug #1152514)
 	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
 	TODO: check details from upstream and affected versions
 CVE-2026-108280
-	- request-tracker5 <unfixed>
+	- request-tracker5 <unfixed> (bug #1152514)
 	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
 	TODO: check details from upstream and affected versions
 CVE-2026-108347
-	- request-tracker5 <unfixed>
+	- request-tracker5 <unfixed> (bug #1152514)
 	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
 	TODO: check details from upstream and affected versions
 CVE-2026-108365
-	- request-tracker5 <unfixed>
+	- request-tracker5 <unfixed> (bug #1152514)
 	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
 	TODO: check details from upstream and affected versions
 CVE-2026-108371
-	- request-tracker5 <unfixed>
+	- request-tracker5 <unfixed> (bug #1152514)
 	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
 	TODO: check details from upstream and affected versions
 CVE-2026-108343
-	- request-tracker5 <unfixed>
+	- request-tracker5 <unfixed> (bug #1152514)
 	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
 	TODO: check details from upstream and affected versions
 CVE-2026-108344
-	- request-tracker5 <unfixed>
+	- request-tracker5 <unfixed> (bug #1152514)
 	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
 	TODO: check details from upstream and affected versions
 CVE-2026-108346
-	- request-tracker5 <unfixed>
+	- request-tracker5 <unfixed> (bug #1152514)
 	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
 	TODO: check details from upstream and affected versions
 CVE-2026-108351
-	- request-tracker5 <unfixed>
+	- request-tracker5 <unfixed> (bug #1152514)
 	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
 	TODO: check details from upstream and affected versions
 CVE-2026-108349
-	- request-tracker5 <unfixed>
+	- request-tracker5 <unfixed> (bug #1152514)
 	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
 	TODO: check details from upstream and affected versions
 CVE-2026-108352
-	- request-tracker5 <unfixed>
+	- request-tracker5 <unfixed> (bug #1152514)
 	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
 	TODO: check details from upstream and affected versions
 CVE-2026-108350
-	- request-tracker5 <unfixed>
+	- request-tracker5 <unfixed> (bug #1152514)
 	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
 	TODO: check details from upstream and affected versions
 CVE-2026-108348
-	- request-tracker5 <unfixed>
+	- request-tracker5 <unfixed> (bug #1152514)
 	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
 	TODO: check details from upstream and affected versions
 CVE-2026-108274
-	- request-tracker5 <unfixed>
+	- request-tracker5 <unfixed> (bug #1152514)
 	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
 	TODO: check details from upstream and affected versions
 CVE-2026-108282
-	- request-tracker5 <unfixed>
+	- request-tracker5 <unfixed> (bug #1152514)
 	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
 	TODO: check details from upstream and affected versions
 CVE-2026-108342
-	- request-tracker5 <unfixed>
+	- request-tracker5 <unfixed> (bug #1152514)
 	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
 	TODO: check details from upstream and affected versions
 CVE-2026-108281
-	- request-tracker5 <unfixed>
+	- request-tracker5 <unfixed> (bug #1152514)
 	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
 	TODO: check details from upstream and affected versions
 CVE-2026-105454
-	- request-tracker5 <unfixed>
+	- request-tracker5 <unfixed> (bug #1152514)
 	NOTE: https://github.com/bestpractical/rt/releases/tag/rt-5.0.11
 	TODO: check details from upstream and affected versions
 CVE-2026-9536 (A heap-based buffer overflow vulnerability exists in the vtkWindBladeR ...)
@@ -11403,7 +11403,7 @@ CVE-2026-110353 (HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attack
 	NOTE: https://git.haproxy.org/?p=haproxy-3.0.git;a=commit;h=e1672c9ca04c81b544a60e316eb2bb4af02381e1 (v3.0.30)
 	NOTE: https://git.haproxy.org/?p=haproxy-2.6.git;a=commit;h=f07a3dbd514ac585177792cca1ff0e5008f28b60 (v2.6.35)
 CVE-2026-110264 (An issue has been discovered in GitLab CE/EE affecting all versions fr ...)
-	- ruby3.3 <unfixed>
+	- ruby3.3 <unfixed> (bug #1152513)
 	- ruby3.1 <removed>
 	NOTE: https://github.com/ruby/ruby/pull/16801
 	NOTE: Fixed by: https://github.com/ruby/ruby/commit/493d26dcdea8b2f0ac5d28e057b401bc809e7fae (v4.1.0-preview1)
@@ -24656,7 +24656,7 @@ CVE-2025-9373 (The PeproDev Branches Map plugin for WordPress is vulnerable to S
 CVE-2025-71433 (Kaneo before 2.1.6 contains a missing authorization vulnerability that ...)
 	NOT-FOR-US: Kaneo
 CVE-2024-58392 (PhysicsFS through 3.2.0 contains an out-of-bounds read vulnerability i ...)
-	- libphysfs <unfixed> (unimportant)
+	- libphysfs <unfixed> (unimportant; bug #1152517)
 	NOTE: https://github.com/icculus/physfs/commit/8a90802778f14dea9c086fb5436839181a3222d5
 	NOTE: https://github.com/icculus/physfs/issues/79
 	NOTE: https://github.com/icculus/physfs/pull/80
@@ -30261,7 +30261,7 @@ CVE-2026-9268 (GitLab has remediated an issue in GitLab EE affecting all version
 CVE-2026-97691 (Convex is an open-source reactive database for application developers. ...)
 	NOT-FOR-US: Convex
 CVE-2026-97229 (GitLab has remediated an issue in GitLab CE/EE affecting all versions  ...)
-	- ruby3.3 <unfixed>
+	- ruby3.3 <unfixed> (bug #1152513)
 	- ruby3.1 <removed>
 	NOTE: https://github.com/ruby/ruby/pull/19020
 	NOTE: Fixed by: https://github.com/ruby/ruby/commit/7cfe8dc82f9f1b3f9c37c78e362fcbdf3c0b84f4 (v4.1.0-preview1)
@@ -54114,7 +54114,7 @@ CVE-2026-93620 (Unauthenticated Broken Access Control in PayPlus Payment Gateway
 CVE-2026-93618 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-93577 (GitLab has remediated an issue in GitLab CE/EE affecting all versions  ...)
-	- ruby3.3 <unfixed>
+	- ruby3.3 <unfixed> (bug #1152513)
 	- ruby3.1 <removed>
 	NOTE: https://github.com/ruby/ruby/pull/19020
 	NOTE: Fixed by: https://github.com/ruby/ruby/commit/7cfe8dc82f9f1b3f9c37c78e362fcbdf3c0b84f4 (v4.1.0-preview1)
@@ -54257,7 +54257,7 @@ CVE-2026-90900 (Joomla Extension - joomshaper.com - Missing CSRF Token Verificat
 CVE-2026-90899 (Joomla Extension - joomshaper.com - Unauthenticated PII Exposure via I ...)
 	NOT-FOR-US: Joomla
 CVE-2026-89078 (GitLab has remediated an issue in GitLab CE/EE affecting all versions  ...)
-	- ruby3.3 <unfixed>
+	- ruby3.3 <unfixed> (bug #1152513)
 	- ruby3.1 <removed>
 	NOTE: https://github.com/ruby/ruby/pull/13332
 	NOTE: Fixed by: https://github.com/ruby/ruby/commit/35000ac2ed3a1829f8d193ffb23da0e44cc6fe5f (v4.0.0-preview2)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c7d814e6bf5884433ca4610ef5eb9643017032e2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c7d814e6bf5884433ca4610ef5eb9643017032e2
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261030/029ed5ba/attachment.htm>

More information about the debian-security-tracker-commits mailing list