[Git][security-tracker-team/security-tracker][master] Add two more netty issues
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sat Sep 19 08:44:53 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
917d775f by Salvatore Bonaccorso at 2026-09-19T09:44:35+02:00
Add two more netty issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -33,9 +33,13 @@ CVE-2026-93739 (A vulnerability was determined in Totolink A3002MU Hh-B20211125.
CVE-2026-93738 (A vulnerability was found in Totolink A3002MU Hh-B20211125.1046. This ...)
NOT-FOR-US: TOTOLINK
CVE-2026-93574 (A flaw was found in Netty's `netty-codec-http` component. A remote att ...)
- TODO: check
+ - netty <unfixed>
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2536966
+ NOTE: https://github.com/netty/netty/security/advisories/GHSA-j4mg-hqgv-34qc
CVE-2026-93562 (A flaw was found in Netty's HTTP/1 decoder. Incomplete validation of m ...)
- TODO: check
+ - netty <unfixed>
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2536951
+ NOTE: https://github.com/netty/netty/security/advisories/GHSA-hcvj-94mj-jp5c
CVE-2026-93031 (The WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, ...)
NOT-FOR-US: WordPress plugin
CVE-2026-92967 (The Pochipp plugin for WordPress is vulnerable to Reflected Cross-Site ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/917d775fa70f5f0f2dd8bd43776912c53e14c3a1
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/917d775fa70f5f0f2dd8bd43776912c53e14c3a1
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260919/209f7b34/attachment.htm>
More information about the debian-security-tracker-commits
mailing list