[Git][security-tracker-team/security-tracker][master] new resteasy issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5835f98a by Moritz Muehlenhoff at 2026-09-02T13:33:31+02:00
new resteasy issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2010,7 +2010,10 @@ CVE-2026-19616 (Missing Authorization vulnerability in TBC Technology Inc. KitLo
 CVE-2026-19410 (An Incorrect Authorization vulnerability in GitHub Trigger Comment Con ...)
 	TODO: check
 CVE-2026-17615 (A flaw was found in RESTEasy's SourceProvider. This vulnerability allo ...)
-	TODO: check
+	- resteasy <unfixed>
+	- resteasy3.0 <unfixed>
+	[trixie] - resteasy3.0 <ignored> (Minor issue, no reverse deps in Trixie)
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2507635
 CVE-2026-14696 (When Ethernet bridging is enabled (CONFIG_NET_ETHERNET_BRIDGE), eth_br ...)
 	NOT-FOR-US: Zephyr, different from src:zephyr
 CVE-2026-14368 (The LwM2M JSON content formatter's get_string() in subsys/net/lib/lwm2 ...)
@@ -450477,7 +450480,7 @@ CVE-2023-0483 (An issue has been discovered in GitLab affecting all versions sta
 CVE-2023-0482 (In RESTEasy the insecure File.createTempFile() is used in the DataSour ...)
 	- resteasy <unfixed> (bug #1031728)
 	- resteasy3.0 <unfixed> (bug #1031729)
-	[trixie] - resteasy3.0 <ignored> (Minor issue, no reverse deps in Bookworm)
+	[trixie] - resteasy3.0 <ignored> (Minor issue, no reverse deps in Trixie)
 	[bookworm] - resteasy3.0 <ignored> (Minor issue, no reverse deps in Bookworm)
 	[bullseye] - resteasy3.0 <no-dsa> (Minor issue)
 	[buster] - resteasy3.0 <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5835f98ab667c4f4eabddb5e6019979b4b42bdb5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5835f98ab667c4f4eabddb5e6019979b4b42bdb5
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260902/ab53c14c/attachment.htm>