[Git][security-tracker-team/security-tracker][master] Add new misp issues, itp'ed

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e868893e by Salvatore Bonaccorso at 2026-09-07T21:35:59+02:00
Add new misp issues, itp'ed

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -63,13 +63,13 @@ CVE-2026-86469 (A flaw was found in GLib2. When g_file_replace() is used with G_
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2473839
 	NOTE: https://gitlab.gnome.org/GNOME/glib/-/work_items/4044
 CVE-2026-86452 (Affected versions of MISP permit unauthenticated or weakly constrained ...)
-	TODO: check
+	- misp <itp> (bug #1144317)
 CVE-2026-86451 (Affected versions of MISP allow authenticated users to retrieve object ...)
-	TODO: check
+	- misp <itp> (bug #1144317)
 CVE-2026-86441 (Affected versions of MISP contain inconsistent authorization checks ac ...)
-	TODO: check
+	- misp <itp> (bug #1144317)
 CVE-2026-86440 (Affected versions of MISP insufficiently validate URLs used by dashboa ...)
-	TODO: check
+	- misp <itp> (bug #1144317)
 CVE-2026-86435 (commonmark versions from 1.5.0 before 2.8.4 contain a denial of servic ...)
 	TODO: check
 CVE-2026-86434 (league/commonmark versions >= 2.0.0 and < 2.8.4 (patched in 2.9.0) con ...)
@@ -103,23 +103,23 @@ CVE-2026-86421 (ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak
 CVE-2026-86420 (ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the  ...)
 	TODO: check
 CVE-2026-86419 (Affected versions of MISP contain insufficient validation of server-si ...)
-	TODO: check
+	- misp <itp> (bug #1144317)
 CVE-2026-86418 (Affected versions of MISP expose organisation metadata through the das ...)
-	TODO: check
+	- misp <itp> (bug #1144317)
 CVE-2026-86417 (Affected versions of MISP inconsistently enforced email-address visibi ...)
-	TODO: check
+	- misp <itp> (bug #1144317)
 CVE-2026-86416 (ILIAS versions before 9.23, 10.11, and 11.4 contain an authorization b ...)
 	TODO: check
 CVE-2026-86408 (Affected versions of MISP do not enforce parent-event visibility when  ...)
-	TODO: check
+	- misp <itp> (bug #1144317)
 CVE-2026-86404 (EAP's Artemis deserialization configuration permits deserialization by ...)
 	TODO: check
 CVE-2026-86351 (Affected versions of MISP validate the user-configurable homepage by c ...)
-	TODO: check
+	- misp <itp> (bug #1144317)
 CVE-2026-86347 (Affected versions of MISP allow any authenticated user to access Templ ...)
-	TODO: check
+	- misp <itp> (bug #1144317)
 CVE-2026-86342 (Affected versions of MISP contain improper authorization checks in the ...)
-	TODO: check
+	- misp <itp> (bug #1144317)
 CVE-2026-86332 (A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend ...)
 	TODO: check
 CVE-2026-86321 (A vulnerability was found in java-json-tools jackson-coreutils 2.0. Af ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e868893eaf3a5cfcda32e34b9f63fdad072bd476

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e868893eaf3a5cfcda32e34b9f63fdad072bd476
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260907/faeed980/attachment-0001.htm>