[Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5fea9a99 by Salvatore Bonaccorso at 2026-10-30T23:26:09+01:00
Add Debian bug references for various issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -33,7 +33,7 @@ CVE-2026-86715 (Plaintext storage of a password vulnerability in Crypttech Crypt
 CVE-2026-85268 (A Cross-Site Scripting (XSS) (CWE-79) vulnerability in the auth/handle ...)
 	NOT-FOR-US: Google Cloud
 CVE-2026-84243 (The gettext family of functions in the GNU C Library version 2.0 and l ...)
-	- glibc <unfixed>
+	- glibc <unfixed> (bug #1152640)
 	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=17142
 	NOTE: https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0025
 CVE-2026-82104 (In Teltonika Networks RUTOS devices running versions from 7.22 through ...)
@@ -927,12 +927,12 @@ CVE-2026-119283 (joserfc is a Python library that provides an implementation of
 CVE-2026-119282 (Nx is a monorepo solution for TypeScript and polyglot codebases. From  ...)
 	TODO: check
 CVE-2026-119281 (MariaDB Connector/J is used to connect applications developed in Java  ...)
-	- mariadb-connector-java <unfixed>
+	- mariadb-connector-java <unfixed> (bug #1152641)
 	NOTE: https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-grfq-r75j-rw9x
 	NOTE: https://jira.mariadb.org/browse/CONJ-1379
 	NOTE: Fixed by: https://github.com/mariadb-corporation/mariadb-connector-j/commit/af5e565eb171cfc66ea8e948ddc616abed0c4623 (3.5.11)
 CVE-2026-119280 (MariaDB Connector/J is used to connect applications developed in Java  ...)
-	- mariadb-connector-java <unfixed>
+	- mariadb-connector-java <unfixed> (bug #1152641)
 	NOTE: https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-4jq2-8v3c-97w8
 	NOTE: https://jira.mariadb.org/browse/CONJ-1357
 	NOTE: Fixed by: https://github.com/mariadb-corporation/mariadb-connector-j/commit/280efcfb4390055858fa2dd12b722d85a6a13ab8 (3.5.11)
@@ -948,12 +948,12 @@ CVE-2026-119278 (MariaDB Connector/J is used to connect applications developed i
 	NOTE: Track first version in the 3.5.y series as the fixed version
 	TODO: check, details + correctness
 CVE-2026-119277 (MariaDB Connector/J is used to connect applications developed in Java  ...)
-	- mariadb-connector-java <unfixed>
+	- mariadb-connector-java <unfixed> (bug #1152641)
 	NOTE: https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-wfxr-v78w-p49r
 	NOTE: https://jira.mariadb.org/browse/CONJ-1381
 	NOTE: Fixed by: https://github.com/mariadb-corporation/mariadb-connector-j/commit/52538206298db39062ad67939f1446b767cacde4 (3.5.11)
 CVE-2026-119276 (MariaDB Connector/J is used to connect applications developed in Java  ...)
-	- mariadb-connector-java <unfixed>
+	- mariadb-connector-java <unfixed> (bug #1152641)
 	NOTE: https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-h599-m3w5-9m7x
 	NOTE: Fixed by: https://github.com/mariadb-corporation/mariadb-connector-j/commit/b9e1ee8d9b4d820d70719504cdfd5c97f1aede5f (3.5.11)
 CVE-2026-119272 (Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078. ...)
@@ -985,7 +985,7 @@ CVE-2026-119261 (Improper input validation in Skia in Google Chrome prior to 156
 CVE-2026-119260 (Use after free in Frames in Google Chrome prior to 156.0.8078.79 allow ...)
 	- chromium <unfixed>
 CVE-2026-119210 (MariaDB Connector/J is used to connect applications developed in Java  ...)
-	- mariadb-connector-java <unfixed>
+	- mariadb-connector-java <unfixed> (bug #1152641)
 	NOTE: https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-fhx5-2xqw-2cgm
 	NOTE: https://jira.mariadb.org/browse/CONJ-1387
 	NOTE: Fixed by: https://github.com/mariadb-corporation/mariadb-connector-j/commit/a4891f877f1c885a573194771c1ed0aacec0ce1d (3.5.11)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5fea9a994d36850baf5754bd8b9c9d8f02ad7ab4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5fea9a994d36850baf5754bd8b9c9d8f02ad7ab4
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261030/ed7f23db/attachment.htm>