[Git][security-tracker-team/security-tracker][master] Add two new freeipa issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
582ca83c by Salvatore Bonaccorso at 2026-09-08T06:40:38+02:00
Add two new freeipa issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -288,7 +288,9 @@ CVE-2026-79734 (Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG
 CVE-2026-79691 (Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 A ...)
 	NOT-FOR-US: Dell / EMC
 CVE-2026-79678 (A flaw was found in FreeIPA's idp-add command, where insufficiently va ...)
-	TODO: check
+	- freeipa <unfixed> (unimportant)
+	NOTE: FreeIPA in Debian only builds the client packages, not the server
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2523356
 CVE-2026-79645 (Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 A ...)
 	NOT-FOR-US: Dell / EMC
 CVE-2026-79644 (Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 A ...)
@@ -314,7 +316,9 @@ CVE-2026-77698 (Zohocorp ManageEngine Endpoint Central versions before 11.5.2605
 CVE-2026-77697 (Zohocorp ManageEngine Endpoint Central versions below 11.4.2540.23 are ...)
 	NOT-FOR-US: Zoho
 CVE-2026-76578 (A flaw was found in FreeIPA. The self-managed OTP token ACI does not r ...)
-	TODO: check
+	- freeipa <unfixed> (unimportant)
+	NOTE: FreeIPA in Debian only builds the client packages, not the server
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2519522
 CVE-2026-76560 (A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule eva ...)
 	TODO: check
 CVE-2026-6431 (The User Profile Builder \u2013 Beautiful User Registration Forms, Use ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/582ca83c6b902cfc91b2d2a9edc40174530a4bcb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/582ca83c6b902cfc91b2d2a9edc40174530a4bcb
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260908/505364cb/attachment.htm>