[Git][security-tracker-team/security-tracker][master] Add various reported bug references for CVEs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f27fde0a by Salvatore Bonaccorso at 2026-09-04T21:07:48+02:00
Add various reported bug references for CVEs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -6515,7 +6515,7 @@ CVE-2026-81500
 	[trixie] - incus <no-dsa> (Minor issue)
 	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-9pqw-c7m4-xvg7
 CVE-2026-18374 (Passing an effectively empty string to the `,ccs=` syntax extension of ...)
-	- glibc <unfixed>
+	- glibc <unfixed> (bug #1146721)
 	[trixie] - glibc <no-dsa> (Minor issue)
 	[bookworm] - glibc <postponed> (Minor issue)
 	NOTE: https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0015
@@ -11699,11 +11699,11 @@ CVE-2026-12555 (Potential security vulnerabilities have been identified in HP Ea
 CVE-2026-12554 (Potential security vulnerabilities have been identified in HP Easy Sta ...)
 	NOT-FOR-US: HP
 CVE-2026-10618 (Hugo's default fenced-code-block renderer writes attribute values take ...)
-	- hugo <unfixed>
+	- hugo <unfixed> (bug #1146720)
 	NOTE: https://github.com/gohugoio/hugo/issues/15247
 	NOTE: https://github.com/gohugoio/hugo/commit/e4dc48cf7f8e06fc1e7e4c290dccc7c35d881c55
 CVE-2026-10582 (Hugo's security.http.urls allowlist is the only control on outbound fe ...)
-	- hugo <unfixed>
+	- hugo <unfixed> (bug #1146720)
 	NOTE: https://github.com/gohugoio/hugo/issues/15247
 	NOTE: https://github.com/gohugoio/hugo/commit/d6e6f9e500eebdeae8e28de830fff2e3bfc7d534
 CVE-2025-68833 (HCL Hive Keycloak IAM Instance is affected by insufficient granularity ...)
@@ -25513,7 +25513,7 @@ CVE-2026-1621 (Authentication bypass by primary weakness vulnerability in Univer
 CVE-2026-19884 (In Eclipse Theia versions up to and including 1.69.0, opening a folder ...)
 	NOT-FOR-US: Eclipse
 CVE-2026-19880 (Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (l ...)
-	- logback <unfixed>
+	- logback <unfixed> (bug #1146719)
 	[trixie] - logback <no-dsa> (Minor issue)
 	NOTE: https://logback.qos.ch/news.html#1.6.3
 CVE-2026-19879 (A flaw was found in Undertow, an HTTP server, within its HTTP response ...)
@@ -36070,7 +36070,7 @@ CVE-2026-18953 (Improper limitation of a pathname to a restricted directory in t
 CVE-2026-18909 (A stack-based buffer overflow vulnerability exists in ELAN Microelectr ...)
 	NOT-FOR-US: ELAN Microelectronics Corp. ELAN Smart-Pad on Windows
 CVE-2026-18839 (An integer underflow was found in the popt library when formatting hel ...)
-	- popt <unfixed>
+	- popt <unfixed> (bug #1146722)
 	[trixie] - popt <no-dsa> (Minor issue)
 	[bookworm] - popt <postponed> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2511010
@@ -37753,7 +37753,7 @@ CVE-2026-42169 (A heap-buffer-overflow vulnerability exists in the APNG (Animate
 CVE-2026-41447 (FirmaCheck for Windows before 1.3.16 contains a DLL hijacking vulnerab ...)
 	NOT-FOR-US: FirmaCheck for Windows
 CVE-2026-18739 (A flaw was found in popt, a command-line option parsing library. An of ...)
-	- popt <unfixed>
+	- popt <unfixed> (bug #1146722)
 	[trixie] - popt <no-dsa> (Minor issue)
 	[bookworm] - popt <postponed> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2510737



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f27fde0a39130e2fcd1c14869b2297fd755ecf95

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f27fde0a39130e2fcd1c14869b2297fd755ecf95
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260904/f3b0e228/attachment-0001.htm>