[Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sat Oct 31 19:14:34 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
e426e0c5 by security tracker role at 2026-10-31T19:13:52+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,117 @@
+CVE-2026-96554 (The BuddyBoss Platform plugin for WordPress is vulnerable to Stored Cr ...)
+ TODO: check
+CVE-2026-78192 (WebDyne versions from 2.022 before 3.022 for Perl disclose application ...)
+ TODO: check
+CVE-2026-78191 (WebDyne versions from 2.031 before 3.022 for Perl execute files with . ...)
+ TODO: check
+CVE-2026-78190 (WebDyne versions from 2.014 before 3.022 for Perl reflect request para ...)
+ TODO: check
+CVE-2026-78189 (WebDyne versions from 3.007 before 3.022 for Perl execute .psp files o ...)
+ TODO: check
+CVE-2026-78188 (WebDyne versions from 2.014 before 3.022 for Perl issue session cookie ...)
+ TODO: check
+CVE-2026-76010 (The Photo Gallery, Sliders, Proofing and Themes \u2013 NextGEN Gallery ...)
+ TODO: check
+CVE-2026-15272 (The Web 2.0 Directory plugin for WordPress is vulnerable to time-based ...)
+ TODO: check
+CVE-2026-120210 (FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in th ...)
+ TODO: check
+CVE-2026-120209 (AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secre ...)
+ TODO: check
+CVE-2026-120208 (libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vul ...)
+ TODO: check
+CVE-2026-120207 (Thelia Page Module before 2.0.4 contains a cross-site request forgery ...)
+ TODO: check
+CVE-2026-120206 (Thelia before 3.2.0 contains a cross-site request forgery vulnerabilit ...)
+ TODO: check
+CVE-2026-120205 (Thelia before 3.1.0 contains a stored cross-site scripting vulnerabili ...)
+ TODO: check
+CVE-2026-120204 (DeepInfer through 0.1.0 contains a path traversal vulnerability in the ...)
+ TODO: check
+CVE-2026-120203 (ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in ...)
+ TODO: check
+CVE-2026-120202 (Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypas ...)
+ TODO: check
+CVE-2026-120201 (Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerab ...)
+ TODO: check
+CVE-2026-120200 (Nexterm through 1.2.2-BETA contains a missing authorization vulnerabil ...)
+ TODO: check
+CVE-2026-120199 (LearnHouse before 1.1.1 contains a missing authorization vulnerability ...)
+ TODO: check
+CVE-2026-120194 (A flaw was found in json-glib. The JSONPath slice evaluator used by js ...)
+ TODO: check
+CVE-2026-120114 (The Debug Log Manager \u2013 Conveniently Monitor and Inspect Errors p ...)
+ TODO: check
+CVE-2026-120075 (The WP Activity Log plugin for WordPress is vulnerable to Stored Cross ...)
+ TODO: check
+CVE-2026-120070 (The User Frontend \u2013 Membership, User Registration, User Profile, ...)
+ TODO: check
+CVE-2026-119160 (The Smart Post \u2013 Post Grid, Post Carousel, Post Slider Gutenberg ...)
+ TODO: check
+CVE-2026-119096 (The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable t ...)
+ TODO: check
+CVE-2026-118235 (The SimpleForm \u2013 Form Maker to Chat Apps with Quiz, Poll and Mult ...)
+ TODO: check
+CVE-2026-118147 (Improper certificate validation in Visual Studio allows an unauthorize ...)
+ TODO: check
+CVE-2026-118057 (The Shield Security \u2013 Smart Bot Blocking, Brute-Force Login Prote ...)
+ TODO: check
+CVE-2026-117681 (A flaw was found in konflux-ci. This vulnerability allows privilege es ...)
+ TODO: check
+CVE-2026-116964 (A flaw was found in konflux-ci. An attacker with repository write acce ...)
+ TODO: check
+CVE-2026-116752 (The GeoDirectory \u2013 WP Business Directory Plugin and Classified Li ...)
+ TODO: check
+CVE-2026-116535 (The SEOPress \u2013 AI SEO Plugin & On-site SEO plugin for WordPress i ...)
+ TODO: check
+CVE-2026-116512 (The Project Manager \u2013 AI Powered Project Management, Task Managem ...)
+ TODO: check
+CVE-2026-116086 (A flaw was found in konflux-ci. An attacker with permission to trigger ...)
+ TODO: check
+CVE-2026-114217 (A flaw was found in konflux-ci. Continuous Integration (CI) automation ...)
+ TODO: check
+CVE-2026-111592 (The Co-Authors, Multiple Authors and Guest Authors in an Author Box wi ...)
+ TODO: check
+CVE-2026-111070 (The Content Pilot \u2013 Autoblogging & Affiliate Marketing Suite plug ...)
+ TODO: check
+CVE-2026-110530 (The FeedWordPress plugin for WordPress is vulnerable to Stored Cross-S ...)
+ TODO: check
+CVE-2026-110023 (The WP Data Access \u2013 App Builder for Tables, Forms, Dashboards, C ...)
+ TODO: check
+CVE-2026-109367 (The All in One SEO \u2013 AI SEO Plugin to Boost SEO Rankings & Traffi ...)
+ TODO: check
+CVE-2026-109231 (The Germanized for WooCommerce plugin for WordPress is vulnerable to U ...)
+ TODO: check
+CVE-2026-109197 (The WP Directory Kit plugin for WordPress is vulnerable to generic SQL ...)
+ TODO: check
+CVE-2026-107759 (The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulner ...)
+ TODO: check
+CVE-2026-107711 (The FlexStock \u2013 Product Stock Sync with Google Sheets for WooComm ...)
+ TODO: check
+CVE-2026-104926 (The WooCommerce Extra Product Options Pro plugin for WordPress is vuln ...)
+ TODO: check
+CVE-2026-104012 (The Rox Appointment Booking \u2013 Appointment Booking Scheduling Solu ...)
+ TODO: check
+CVE-2026-103997 (The Redux Framework plugin for WordPress is vulnerable to authorizatio ...)
+ TODO: check
+CVE-2026-103962 (The User Frontend \u2013 Membership, User Registration, User Profile, ...)
+ TODO: check
+CVE-2026-103915 (The Booking for Appointments and Events Calendar \u2013 Amelia plugin ...)
+ TODO: check
+CVE-2026-103898 (The Wp Social Login and Register Social Counter plugin for WordPress i ...)
+ TODO: check
+CVE-2026-103882 (The Acadlix LMS \u2013 AI Quiz Maker, Online Exam & Course Plugin for ...)
+ TODO: check
+CVE-2026-102212 (Heap-based buffer overflow in Opengear IM72XX, CM71XX, and ACM70XX fir ...)
+ TODO: check
+CVE-2026-101325 (The Newsletters plugin for WordPress is vulnerable to time-based SQL I ...)
+ TODO: check
+CVE-2026-100151 (The Ninja Forms \u2013 Contact Form Builder with Calculators, Quizzes, ...)
+ TODO: check
+CVE-2025-9462 (The WP2LEADS plugin for WordPress is vulnerable to time-based SQL Inje ...)
+ TODO: check
+CVE-2025-11455 (The Perfect Images plugin for WordPress is vulnerable to unauthorized ...)
+ TODO: check
CVE-2026-XXXX [GHSA-4pp3-6hmx-mfmg: Memory exhaustion DoS via crafted QuickTime dref/elst/keys/stsd atoms in module.audio-video.quicktime.php]
- php-getid3 1.9.28+dfsg-1
NOTE: https://github.com/JamesHeinrich/getID3/security/advisories/GHSA-4pp3-6hmx-mfmg
@@ -4836,7 +4950,7 @@ CVE-2026-18326
REJECTED
CVE-2026-15323 (The Product Designer for WooCommerce WordPress | Lumise plugin for Wor ...)
NOT-FOR-US: WordPress plugin
-CVE-2026-118384 (GNU mtools through 4.0.49 has an out-of-bounds write in parse_vses in ...)
+CVE-2026-118384 (GNU mtools before 4.0.50 has an out-of-bounds write in parse_vses in v ...)
- mtools <unfixed>
NOTE: https://lists.gnu.org/archive/html/info-mtools/2026-10/msg00002.html
CVE-2026-118378 (Tabularis before 0.28.0 contains an SQL injection vulnerability in its ...)
@@ -42559,12 +42673,12 @@ CVE-2026-103342 (Improper Neutralization of Input During Web Page Generation ('C
NOT-FOR-US: WordPress plugin or theme
CVE-2026-103065 (Improper Validation of Specified Quantity in Input vulnerability in Th ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-118599
+CVE-2026-118599 (A file overwrite vulnerability exists in Epiphany when installing WebE ...)
- epiphany-browser <unfixed>
NOTE: https://gitlab.gnome.org/GNOME/epiphany/-/work_items/2988
NOTE: https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/2248
NOTE: Fixed by: https://gitlab.gnome.org/GNOME/epiphany/-/commit/0cc9ab5506689a4b82a4b1a41ad71e895cfa48d4
-CVE-2026-118598
+CVE-2026-118598 (A logic error in Epiphany's site permission handling can cause camera ...)
- epiphany-browser <unfixed>
NOTE: https://gitlab.gnome.org/GNOME/epiphany/-/work_items/2976
NOTE: https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/2249
@@ -61265,7 +61379,7 @@ CVE-2026-69865 (Authorization bypass through user-controlled key in Microsoft Co
NOT-FOR-US: Microsoft
CVE-2026-69843 (Authentication bypass by spoofing in Microsoft Fabric allows an unauth ...)
NOT-FOR-US: Microsoft
-CVE-2026-69399 (Azure Arc Elevation of Privilege Vulnerability)
+CVE-2026-69399 (Unintended proxy or intermediary in Azure Arc allows an authorized att ...)
NOT-FOR-US: Microsoft
CVE-2026-68791 (Incorrect authorization in Azure Machine Learning allows an unauthoriz ...)
NOT-FOR-US: Microsoft
@@ -89591,7 +89705,7 @@ CVE-2026-75758 (Uncontrolled Recursion vulnerability in the Elixir standard libr
CVE-2026-73827 (SOY Calendar contains a cross-site scripting vulnerability. An arbitra ...)
NOT-FOR-US: SOY
CVE-2026-73209 (An attacker that has valid credentials can send crafted compressed dat ...)
- {DSA-6526-1}
+ {DSA-6526-1 DLA-4873-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-73209-imap-login-crash-self-recursion-on-zero-output-decompress-chunks
NOTE: Fixed by: https://github.com/dovecot/core/commit/d0559b33adf1470547b6ee6ea7a82903296c5f69
@@ -89604,7 +89718,7 @@ CVE-2026-73209 (An attacker that has valid credentials can send crafted compress
NOTE: Fixed by: https://github.com/dovecot/core/commit/e9eb23933949f8cbdd13282071169dc89876c139
NOTE: Fixed by: https://github.com/dovecot/core/commit/f740e63144970ee36d3ca6d38e52b81d405c6f67
CVE-2026-73208 (An attacker that holds a token intended for a different purpose can au ...)
- {DSA-6526-1}
+ {DSA-6526-1 DLA-4873-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-73208-auth-db-oauth2-aud-claim-used-as-fallback-for-missing-scope-claim
NOTE: Same fixes for CVE-2026-40205 and CVE-2026-73208
@@ -89640,14 +89754,14 @@ CVE-2026-56854 (The source-address critical option in the Permissions returned b
NOTE: https://github.com/golang/go/issues/80213
NOTE: Fixed by: https://github.com/golang/crypto/commit/e557b08ec2b4f5dd00f38356919fc7b051dd88f8 (v0.55.0)
CVE-2026-52687 (An attacker that has valid credentials can select a compression algori ...)
- {DSA-6526-1}
+ {DSA-6526-1 DLA-4873-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-52687-imap-compress-zstd-can-cause-excessive-memory-usage
NOTE: Fixed by: https://github.com/dovecot/core/commit/65293cc0a6bc74f730b9ff036ec1e6456e671f88
NOTE: Fixed by: https://github.com/dovecot/core/commit/e58c15ba1486a055462f7a2853a4b6a954e0eafa
NOTE: Fixed by: https://github.com/dovecot/core/commit/b020b257c45d48c623db54909df4d3ae9b0975a1
CVE-2026-52681 (Sieve CPU resource usage is tracked in the compiled script, so an atta ...)
- {DSA-6526-1}
+ {DSA-6526-1 DLA-4873-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-52681-sieve-resource-usage-tracking-lost-when-active-script-changes
NOTE: Fixed by: https://github.com/dovecot/core/commit/8d52bc7d037cda5f27fe996511a5367752095812
@@ -89669,13 +89783,13 @@ CVE-2026-4378 (Improper neutralization of input during web page generation ('cro
CVE-2026-4246 (The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross ...)
NOT-FOR-US: WordPress plugin
CVE-2026-42395 (A host listed as a trusted proxy can send forwarding information conta ...)
- {DSA-6526-1}
+ {DSA-6526-1 DLA-4873-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-42395-single-nul-byte-xclient-forward-payload-crashes
NOTE: Fixed by: https://github.com/dovecot/core/commit/0a1adbe37e03e859681bab6186494600b1c708ac
NOTE: Fixed by: https://github.com/dovecot/core/commit/991780f2a9d567f9c2f4b136d96b0b35e1d8e9e1
CVE-2026-42393 (The comparison used for the doveadm password and API key is not fully ...)
- {DSA-6526-1}
+ {DSA-6526-1 DLA-4873-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-42393-doveadm-password-or-api-key-length-can-still-be-leaked-with-timing-comparisons
NOTE: Fixed by: https://github.com/dovecot/core/commit/17212df02d002be8b310d41205b32e04da666a4b
@@ -89688,13 +89802,13 @@ CVE-2026-42392 (An attacker that has valid credentials can send an invalid IMAP
NOTE: Fixed by: https://github.com/dovecot/core/commit/48d8141049f7150a0469a4efe68669fbf8bcbb24
NOTE: Introduced with: https://github.com/dovecot/core/commit/bb193c273e63ffa42c5c0b51ecd8860398e3beab (2.4.0)
CVE-2026-42391 (An unauthenticated attacker can send an IMAP ID command with a very la ...)
- {DSA-6526-1}
+ {DSA-6526-1 DLA-4873-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-42391-imap-pre-login-memory-cpu-growth-with-id-command
NOTE: Fixed by: https://github.com/dovecot/core/commit/277e5c880a7f6a7741e717036570812910fff7b7
NOTE: Fixed by: https://github.com/dovecot/core/commit/78518c10c7aa1236c1ed1ebb2d558ce24e6bc122
CVE-2026-42008 (Forwarding information received from a host listed as a trusted proxy ...)
- {DSA-6526-1}
+ {DSA-6526-1 DLA-4873-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-42008-xclient-forward-bare-token-not-namespaced-allows-nopassword-injection-via-trusted-proxy
NOTE: Fixed by: https://github.com/dovecot/core/commit/da832e63e91d640e9a4bc57189c488cd97d99477
@@ -89702,7 +89816,7 @@ CVE-2026-42008 (Forwarding information received from a host listed as a trusted
NOTE: Fixed by: https://github.com/dovecot/core/commit/335abc77650a69860ff522ba87e714173a4e6049
NOTE: Fixed by: https://github.com/dovecot/core/commit/7e60077cafabc3626a6bd7071b753e1c57415558
CVE-2026-42007 (An attacker that has valid credentials can use a Sieve script with the ...)
- {DSA-6526-1}
+ {DSA-6526-1 DLA-4873-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-42007-sieve-editheader-rce
NOTE: Fixed by: https://github.com/dovecot/pigeonhole/commit/69bac9cd6d4ac09100ee50c98052be1437f1da29
@@ -89711,7 +89825,7 @@ CVE-2026-42007 (An attacker that has valid credentials can use a Sieve script wi
CVE-2026-40541 (An improper neutralization of input during web page generation ('Cross ...)
NOT-FOR-US: Synology
CVE-2026-40205 (An attacker that holds an OAuth2 token granting only part of the requi ...)
- {DSA-6526-1}
+ {DSA-6526-1 DLA-4873-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-40205-oauth2-passdb-scope-enforcement-bypass-via-or-semantics-in-remote-validation-path
NOTE: Same fixes for CVE-2026-40205 and CVE-2026-73208
@@ -89719,7 +89833,7 @@ CVE-2026-40205 (An attacker that holds an OAuth2 token granting only part of the
NOTE: Fixed by: https://github.com/dovecot/core/commit/8518e3f62183b462bef645977b48af32e6701f6f
NOTE: Fixed by: https://github.com/dovecot/core/commit/91b7a86a20f805301e8ea15715b246040c4d8cd9
CVE-2026-40204 (None None None No publicly available exploits are known.)
- {DSA-6526-1}
+ {DSA-6526-1 DLA-4873-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-40204-acl-lda-mailbox-autocreate-can-bypass-acl-restrictions
NOTE: Fixed by: https://github.com/dovecot/core/commit/7f2fbf017c479af0363aa35b2cd2dca4b92e16d2
@@ -89727,7 +89841,7 @@ CVE-2026-40204 (None None None No publicly available exploits are known.)
NOTE: Fixed by: https://github.com/dovecot/pigeonhole/commit/f0dfa83a01194126d9a7688bcf30e730d5873b63
NOTE: Fixed by: https://github.com/dovecot/pigeonhole/commit/c211355da2ecdd2d858204468b12bd5667a44e30
CVE-2026-40203 (When IMAP compression is enabled, the same compression state is reused ...)
- {DSA-6526-1}
+ {DSA-6526-1 DLA-4873-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-40203-imap-compression-can-reveal-whether-a-small-synced-email-body-matches-sender-chosen-text
NOTE: Fixed by: https://github.com/dovecot/core/commit/34787cb86a0147d987ab821772d310faab048ba6
@@ -89740,7 +89854,7 @@ CVE-2026-40019 (An unauthenticated attacker can send a truncated quoted argument
[bookworm] - dovecot <not-affected> (Vulnerable code not present, introduced in 2.4.3)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-40019-v2-4-3-regression-managesieve-login-pre-auth-infinite-loop
CVE-2026-40018 (None None None No publicly available exploits are known.)
- {DSA-6526-1}
+ {DSA-6526-1 DLA-4873-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-40018-mysql-multi-byte-escaping-wrong
NOTE: Fixed by: https://github.com/dovecot/core/commit/a78c015eae67a891a0c14b5434dd1f99838ae4cc
@@ -89754,7 +89868,7 @@ CVE-2026-40018 (None None None No publicly available exploits are known.)
NOTE: Fixed by: https://github.com/dovecot/core/commit/ec4cbb78314dc46e77a2abab205969d80708d5f2
NOTE: Fixed by: https://github.com/dovecot/core/commit/d3a4d4fc2d2c84403df6eea0da1c4b7bd1d887da
CVE-2026-40017 (An attacker that can send mail to a user can craft a message header wh ...)
- {DSA-6526-1}
+ {DSA-6526-1 DLA-4873-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-40017-imap-thread-o-m3-cpu-dos-via-crc32-hash-collision-in-strmap-mail-index-strmap-c-hash2-c
NOTE: Fixed by: https://github.com/dovecot/core/commit/d3e1c7fb5845f68d84aa04d941b8116048b06195
@@ -89770,20 +89884,20 @@ CVE-2026-40017 (An attacker that can send mail to a user can craft a message hea
NOTE: Fixed by: https://github.com/dovecot/core/commit/4d886f42e4524ed4df27042e33546512f3fe20cf
NOTE: Fixed by: https://github.com/dovecot/core/commit/8fedf386644e979f731854e53aa2e26d599776a5
CVE-2026-40015 (An attacker that has valid credentials can open many connections to th ...)
- {DSA-6526-1}
+ {DSA-6526-1 DLA-4873-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-40015-imap-hibernate-can-be-crashed
NOTE: Fixed by: https://github.com/dovecot/core/commit/caeee3d1d2b725963555fe63ea8200292cad1058
NOTE: Fixed by: https://github.com/dovecot/core/commit/09f7a34a6a9888d1325524ff8095d0a7793c075f
CVE-2026-40014 (An attacker that can send mail to a user can craft a message header th ...)
- {DSA-6526-1}
+ {DSA-6526-1 DLA-4873-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-40014-imap-thread-references-o-n2-cpu-dos-via-crafted-references-header-index-thread-links-c
NOTE: Fixed by: https://github.com/dovecot/core/commit/113eac6cbbae1bf292e7dd1826eede3f929fe6c9
NOTE: Fixed by: https://github.com/dovecot/core/commit/ad92d716328c646e4dcd4dd2aaa14bc3e422eb8d
NOTE: Fixed by: https://github.com/dovecot/core/commit/f4e7474bdb5e7557ea3d985f9f27ef8d7f91ad68
CVE-2026-40013 (An attacker that has valid credentials can submit a Sieve script conta ...)
- {DSA-6526-1}
+ {DSA-6526-1 DLA-4873-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-40013-pigeonhole-stack-buffer-underflow-in-pigeonhole-managesieve-checkscript-putscript
NOTE: Fixed by: https://github.com/dovecot/pigeonhole/commit/ebbf9fe427aa4f3c543abd4ef80564ff173856bc
@@ -89811,18 +89925,18 @@ CVE-2026-37236 (grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control.
[bookworm] - golang-github-grpc-ecosystem-grpc-gateway <postponed> (Limited support)
NOTE: https://github.com/grpc-ecosystem/grpc-gateway/commit/72123cd4f32545f6e1376873f412dcdcbcf29acc (v2.29.0)
CVE-2026-33607 (An attacker that has valid credentials can use IMAP LIST command to co ...)
- {DSA-6526-1}
+ {DSA-6526-1 DLA-4873-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-33607-dovecot-imap-list-match-sub-exponential-backtracking-%E2%80%94-cpu-denial-of-service
NOTE: Fixed by: https://github.com/dovecot/core/commit/2684624bb68ebbd440dab4d64d0b8be9ef5ea5aa
CVE-2026-33606 (Mail content stored by a user can be crafted so that it is interpreted ...)
- {DSA-6526-1}
+ {DSA-6526-1 DLA-4873-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-33606-dsync-mail-content-can-cause-dsync-protocol-injection
NOTE: Fixed by: https://github.com/dovecot/core/commit/bd707cab9decd4a069c9cdfd3e28d28cf9346fdd
NOTE: Fixed by: https://github.com/dovecot/core/commit/7d782e5f5e51f63483393a460594d6a8f920b6d6
CVE-2026-42394 [sieve: symlink traversal flaw could result in arbitrary file disclosure]
- {DSA-6526-1}
+ {DSA-6526-1 DLA-4873-1}
- dovecot 1:2.4.5+dfsg1-1
NOTE: Fixed by: https://github.com/dovecot/core/commit/3b3e091effb83e0810ca55123bb5ebbe8ccbd7f5
NOTE: Fixed by: https://github.com/dovecot/core/commit/70473a5e603863f7e862e939f4e5daea54cd4e45
@@ -89832,13 +89946,13 @@ CVE-2026-42394 [sieve: symlink traversal flaw could result in arbitrary file dis
NOTE: Fixed by: https://github.com/dovecot/pigeonhole/commit/11599c24512eca1605f05c07f6d4ed967f5859e7
NOTE: Fixed by: https://github.com/dovecot/pigeonhole/commit/34edf6f49441be91b389050ac38943e17c12c2c8
CVE-2026-33605 (An unauthenticated attacker can crash the ManageSieve login process by ...)
- {DSA-6526-1}
+ {DSA-6526-1 DLA-4873-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-33605-managesieve-login-pre-auth-crash
NOTE: Fixed by: https://github.com/dovecot/pigeonhole/commit/14c28ca9c4aab11b1074c629bb744c4741434148
NOTE: Fixed by: https://github.com/dovecot/pigeonhole/commit/77bf1049ab8652b125e02ed00a15e1dd2e1feb98
CVE-2026-33604 (An attacker that can get Dovecot to relay a message, for example throu ...)
- {DSA-6526-1}
+ {DSA-6526-1 DLA-4873-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-33604-smtp-smuggling-via-missing-dot-stuffing-after-bare-carriage-return
NOTE: Fixed by: https://github.com/dovecot/core/commit/e94a6c3cb984f9d1e5fe51714ea5015205d79fd1
@@ -89849,7 +89963,7 @@ CVE-2026-33604 (An attacker that can get Dovecot to relay a message, for example
NOTE: Fixed by: https://github.com/dovecot/core/commit/1da3e4dc88388bb818bcb73610489249e2458353
NOTE: Fixed by: https://github.com/dovecot/core/commit/6e7860f07e11441d2a2e1c00f5f043d0a565b262
CVE-2026-33263 (When mail_max_userip_connections is set (default 10) and reached, subm ...)
- {DSA-6526-1}
+ {DSA-6526-1 DLA-4873-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-33263-submission-login-panic-when-mail-max-userip-connections-is-reached-panic-epoll-ctl-del-8-failed-bad-file-descriptor
NOTE: Fixed by: https://github.com/dovecot/core/commit/ff8d8059d7ba85375c6dc723fc1b7743114fbba4
@@ -89862,7 +89976,7 @@ CVE-2026-33263 (When mail_max_userip_connections is set (default 10) and reached
NOTE: Fixed by: https://github.com/dovecot/pigeonhole/commit/33f5a95c0448e0d104f2cd7591e7f42c19b33199
NOTE: Fixed by: https://github.com/dovecot/pigeonhole/commit/25e1e0adfa4ad44e3205fc8c62ca26a73cf6ee41
CVE-2026-27852 (An attacker that can send mail to a user can craft a message whose hea ...)
- {DSA-6526-1}
+ {DSA-6526-1 DLA-4873-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-27852-dos-by-sending-mail-with-bad-header
NOTE: Fixed by: https://github.com/dovecot/core/commit/035fbfa155288ac037965e0e4700eb198ccbf39a (2.4.3)
@@ -166729,7 +166843,7 @@ CVE-2026-34900 (Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.14.2 v
NOT-FOR-US: WordPress plugin or theme
CVE-2026-34898 (Unauthenticated Broken Access Control in Event Tickets Manager for Woo ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-34892 (Subscriber Broken Access Control in Rank Math SEO <= 1.0.271 versions.)
+CVE-2026-34892 (Missing Authorization vulnerability in Rank Math SEO Rank Math SEO seo ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-34891 (Unauthenticated Sensitive Data Exposure in IDPay Payment Gateway for W ...)
NOT-FOR-US: WordPress plugin or theme
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e426e0c54d74a163d946fb0df97154a69e037a55
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e426e0c54d74a163d946fb0df97154a69e037a55
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261031/6f6b1eda/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list