[Git][security-tracker-team/security-tracker][master] Add CVE-2026-85180/ollama

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
20c2e71a by Salvatore Bonaccorso at 2026-09-03T22:08:42+02:00
Add CVE-2026-85180/ollama

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -96,7 +96,7 @@ CVE-2026-85182 (vhr through commit 03abbd3 fails to verify that the account ID i
 CVE-2026-85181 (CAT uses Java String.hashCode as the sole integrity check for session  ...)
 	NOT-FOR-US: CAT
 CVE-2026-85180 (Ollama fails to validate redirect destinations when pulling tensor-lay ...)
-	TODO: check
+	- ollama <itp> (bug #1094806)
 CVE-2026-85179 (Label Studio through 1.23.0 fails to validate webhook URLs, allowing a ...)
 	NOT-FOR-US: Label Studio
 CVE-2026-85178 (Helicone's VaultManager.getDecryptedProviderKeyById() function in the  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/20c2e71a96d78856bbf0ffa6af85b11aad04aa6d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/20c2e71a96d78856bbf0ffa6af85b11aad04aa6d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260903/3b0c313a/attachment.htm>