[Git][security-tracker-team/security-tracker][master] One flatpak issue got a CVE assigned

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b8851bf7 by Salvatore Bonaccorso at 2026-09-22T15:56:25+02:00
One flatpak issue got a CVE assigned

- - - - -


2 changed files:

- data/CVE/list
- data/DSA/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -55521,9 +55521,8 @@ CVE-2026-XXXX [GHSA-9rww-v4mm-x4jg]
 	[bullseye] - flatpak <not-affected> (Vulnerable code not present)
 	NOTE: https://github.com/flatpak/flatpak/security/advisories/GHSA-9rww-v4mm-x4jg
 	NOTE: Fixed by: https://github.com/flatpak/flatpak/commit/e6fa2f9b416ec382644694c8737dc8fbe7f07b89 (1.18.1)
-CVE-2026-XXXX [GHSA-v2gw-v9h5-9q4x]
+CVE-2026-92162 [GHSA-v2gw-v9h5-9q4x]
 	- flatpak 1.18.1-1 (bug #1144130)
-	[trixie] - flatpak 1.16.6-1~deb13u2
 	NOTE: https://github.com/flatpak/flatpak/security/advisories/GHSA-v2gw-v9h5-9q4x
 	NOTE: Fixed by: https://github.com/flatpak/flatpak/commit/19456b916842b079af833a86b9ab89c5db154b92 (1.18.1)
 	NOTE: Fixed by: https://github.com/flatpak/flatpak/commit/01773f84021dd090b2426f79675f94f2564f9279 (1.18.1)


=====================================
data/DSA/list
=====================================
@@ -227,7 +227,7 @@
 	{CVE-2026-93676}
 	[trixie] - xdg-dbus-proxy 0.1.6-1+deb13u2
 [12 Aug 2026] DSA-6432-1 flatpak - security update
-	{CVE-2026-90616}
+	{CVE-2026-90616 CVE-2026-92162}
 	[trixie] - flatpak 1.16.6-1~deb13u2
 [11 Aug 2026] DSA-6431-1 openjdk-25 - security update
 	{CVE-2026-41254 CVE-2026-46917 CVE-2026-46968 CVE-2026-47010 CVE-2026-47021 CVE-2026-47027 CVE-2026-47059 CVE-2026-47063 CVE-2026-60147}



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b8851bf70fa5c802cb37531f77f95d365c354061

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b8851bf70fa5c802cb37531f77f95d365c354061
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260922/709fb803/attachment-0001.htm>