[Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-107157

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b38e0116 by Salvatore Bonaccorso at 2026-10-31T15:55:17+01:00
Update status for CVE-2026-107157

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -8985,9 +8985,9 @@ CVE-2026-107656 (An authentication bypass using an alternate path or channel vul
 CVE-2026-107157 (Specially crafted CBOR input passed to QCborValue::fromCbor() in Qt Co ...)
 	- qt6-base <unfixed>
 	- qtbase-opensource-src <unfixed>
-	NOTE: https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-107157
+	NOTE: https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-107157:
 	NOTE: https://codereview.qt-project.org/c/qt/qtbase/+/745719
-	NOTE: https://github.com/qt/qtbase/commit/64f07e1ee05f22447a6bd1d74ec3293419c93c5d
+	NOTE: Fixed by: https://github.com/qt/qtbase/commit/08c5ae85586ef9ef6b3f80f98f367de48c6db3d0 (v6.11.3)
 CVE-2026-107092 (NexoPOS v6.2.4 is vulnerable to Directory Traversal via the api/update ...)
 	NOT-FOR-US: NexoPOS
 CVE-2026-107091 (An issue in HUION Inspiroy Frego S (L310) Windows Driver 20.0.1.118 al ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b38e0116b509c115d44e6d62ca110c7a9ae2a267

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b38e0116b509c115d44e6d62ca110c7a9ae2a267
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261031/f5f152e0/attachment.htm>