[Git][security-tracker-team/security-tracker][master] Add new batch of suricata issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
263c241a by Salvatore Bonaccorso at 2026-09-19T11:07:05+02:00
Add new batch of suricata issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -225,9 +225,14 @@ CVE-2026-75885 (A flaw was found in the OpenShift console. Unauthenticated acces
 CVE-2026-75878 (IBM Sterling File Gateway could allow a remote attacker to bypass auth ...)
 	NOT-FOR-US: IBM
 CVE-2026-71855 (Suricata is a network Intrusion Detection System, Intrusion Prevention ...)
-	TODO: check
+	- suricata 1:8.0.6-1
+	NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-fvwh-wjcq-2586
+	NOTE: Fixed by: https://github.com/OISF/suricata/commit/4e2f23d031fbcfd72883bacd3d723c9874f23701 (suricata-8.0.6)
+	NOTE: Fixed by: https://github.com/OISF/suricata/commit/181b3b2fdd1fe87e4534de4fc79e29a083ef125f (suricata-7.0.17)
 CVE-2026-71418 (Suricata is a network Intrusion Detection System, Intrusion Prevention ...)
-	TODO: check
+	- suricata 1:8.0.6-1
+	NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-xjgq-3qw4-jp5f
+	NOTE: Fixed by: https://github.com/OISF/suricata/commit/26c26dea84f00de95151a0e16d21c1fcafac9648 (suricata-8.0.6)
 CVE-2026-68928 (Acode is a powerful text and code editor for Android. From 1.11.6 unti ...)
 	TODO: check
 CVE-2026-63647 (CordysCRM is an open source AI-powered customer relationship managemen ...)
@@ -235,19 +240,40 @@ CVE-2026-63647 (CordysCRM is an open source AI-powered customer relationship man
 CVE-2026-63646 (CordysCRM is an open source AI-powered customer relationship managemen ...)
 	TODO: check
 CVE-2026-63452 (Suricata is a network Intrusion Detection System, Intrusion Prevention ...)
-	TODO: check
+	- suricata 1:8.0.6-1
+	NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-j9cx-w9xm-5x84
+	NOTE: Fixed by: https://github.com/OISF/suricata/commit/e369bf29ee5bbd0cdf6a98dc4a3357ba43c86a88 (suricata-8.0.6)
 CVE-2026-63451 (Suricata is a network Intrusion Detection System, Intrusion Prevention ...)
-	TODO: check
+	- suricata 1:8.0.6-1
+	NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-6qwq-j83r-qp34
+	NOTE: https://github.com/OISF/suricata/pull/15807
+	NOTE: Fixed by: https://github.com/OISF/suricata/commit/5449ae170bfce213907d9bab87143a59774ed48f (suricata-8.0.6)
 CVE-2026-63450 (Suricata is a network Intrusion Detection System, Intrusion Prevention ...)
-	TODO: check
+	- suricata 1:8.0.6-1
+	NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-56wx-7hqh-wfgr
+	NOTE: https://github.com/OISF/suricata/pull/15704
+	NOTE: Fixed by; https://github.com/OISF/suricata/commit/feb0ff91159cea474a983adf92e4b56fb16e4ffc (suricata-8.0.6)
 CVE-2026-63449 (Suricata is a network Intrusion Detection System, Intrusion Prevention ...)
-	TODO: check
+	- suricata 1:8.0.6-1
+	NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-prqx-q74v-wxhv
+	NOTE: https://github.com/OISF/suricata/pull/15807
+	NOTE: Fixed by: https://github.com/OISF/suricata/commit/6f87930aff1e2294e46289cb9cbf4d96d79a209a (suricata-8.0.6)
 CVE-2026-63448 (Suricata is a network Intrusion Detection System, Intrusion Prevention ...)
-	TODO: check
+	- suricata 1:8.0.6-1
+	NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-hvvj-c8xx-9g35
+	NOTE: Fixed by: https://github.com/OISF/suricata/commit/755d6c3061de4d7ba97f0ed31cdc17ab8cab4476 (suricata-8.0.6)
+	NOTE: Fixed by: https://github.com/OISF/suricata/commit/9a54a043516e644bb7b9d34117a91977f950a281 (suricata-8.0.6)
+	NOTE: Fixed by: https://github.com/OISF/suricata/commit/88adab8bd3d62912941647ab65032d5ec75c893a (suricata-7.0.17)
+	NOTE: Fixed by: https://github.com/OISF/suricata/commit/bc39274a638d1cca2391cfa4891c8b6c255ff9ce (suricata-7.0.17)
 CVE-2026-63447 (Suricata is a network Intrusion Detection System, Intrusion Prevention ...)
-	TODO: check
+	- suricata 1:8.0.6-1
+	NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-w394-3g33-3jg9
+	NOTE: Fixed by: https://github.com/OISF/suricata/commit/15bf91c5ccbbbf640cd042e1c96974b262549385 (suricata-8.0.6)
 CVE-2026-63446 (Suricata is a network Intrusion Detection System, Intrusion Prevention ...)
-	TODO: check
+	- suricata 1:8.0.6-1
+	NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-gjwr-75gq-877m
+	NOTE: https://github.com/OISF/suricata/pull/15726
+	NOTE: Fixed by: https://github.com/OISF/suricata/commit/60a83c62a1dfdfb589b2bad27fb7fc339fc964b7 (suricata-8.0.6)
 CVE-2026-61822 (pg_partman is a PostgreSQL extension that manages partitioned tables b ...)
 	TODO: check
 CVE-2026-61821 (pg_partman is a PostgreSQL extension that manages partitioned tables b ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/263c241af4014c951bffdd17de797f07a630918d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/263c241af4014c951bffdd17de797f07a630918d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260919/de64aa9e/attachment-0001.htm>