[Git][security-tracker-team/security-tracker][master] Add new issue in fwupd-efi
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri Oct 30 19:46:58 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
bdc1cde6 by Salvatore Bonaccorso at 2026-10-30T20:46:24+01:00
Add new issue in fwupd-efi
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,6 @@
+CVE-2026-XXXX [GHSA-6w3p-4pq7-j3mp: UEFI Secure Boot bypass via stack overflow vulnerability in signed fwupd EFI application]
+ - fwupd-efi 1:1.9-1
+ NOTE: https://github.com/fwupd/fwupd-efi/security/advisories/GHSA-6w3p-4pq7-j3mp
CVE-2026-9239 (The Meow Gallery plugin for WordPress is vulnerable to Stored Cross-Si ...)
NOT-FOR-US: WordPress plugin
CVE-2026-97638 (The Forminator Forms \u2013 Contact Form, Payment Form & Custom Form B ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bdc1cde66558c727336b66d2b5914c27f19e4b67
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bdc1cde66558c727336b66d2b5914c27f19e4b67
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261030/7fe07284/attachment.htm>
More information about the debian-security-tracker-commits
mailing list