[Git][security-tracker-team/security-tracker][master] Add new libvirt issue

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9bdf47e6 by Salvatore Bonaccorso at 2026-09-12T11:14:21+02:00
Add new libvirt issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1980,7 +1980,9 @@ CVE-2026-78807 (An issue in wpa_supplicant all versions before v.2.12 allows a l
 CVE-2026-78224 (The XSLT Transformer Step builds a bare TransformerFactory without the ...)
 	NOT-FOR-US: NextGen Healthcare
 CVE-2026-77159 (A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepare ...)
-	TODO: check
+	- libvirt 12.7.0-1
+	NOTE: https://gitlab.com/libvirt/libvirt/-/work_items/909
+	NOTE: Fixed by: https://gitlab.com/libvirt/libvirt/-/commit/68e03ee02ff4826827f23d67d6b9eae49d7b9fb1 (v12.7.0-rc1)
 CVE-2026-72710 (SPIP before 4.4.18 contains a remote code execution vulnerability in t ...)
 	- spip 4.4.18+dfsg-1
 	[trixie] - spip 4.4.19+dfsg-0+deb13u1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9bdf47e6a6f7e382777928e5928004bf5d655768

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9bdf47e6a6f7e382777928e5928004bf5d655768
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260912/e36f8c54/attachment.htm>