[Git][security-tracker-team/security-tracker][master] 2 commits: Add new batch of incus issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ad7a82be by Salvatore Bonaccorso at 2026-09-25T06:22:40+02:00
Add new batch of incus issues

- - - - -
a81efce6 by Salvatore Bonaccorso at 2026-09-25T06:23:26+02:00
Add incus to dsa-needed list

- - - - -


2 changed files:

- data/CVE/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,36 @@
+CVE-2026-XXXX [GHSA-4cph-ccqv-hm3c]
+	- incus 7.0.1-5
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-4cph-ccqv-hm3c
+CVE-2026-XXXX [GHSA-hpjh-q53p-f27r]
+	- incus 7.0.1-5
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-hpjh-q53p-f27r
+CVE-2026-XXXX [GHSA-579w-c4rw-c8q3]
+	- incus 7.0.1-5
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-579w-c4rw-c8q3
+CVE-2026-XXXX [GHSA-x8gj-2q73-qr6j]
+	- incus 7.0.1-5
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-x8gj-2q73-qr6j
+CVE-2026-XXXX [GHSA-mmj7-8rgf-mx2h]
+	- incus 7.0.1-5
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-mmj7-8rgf-mx2h
+CVE-2026-XXXX [GHSA-jh4v-j34r-2mgh]
+	- incus 7.0.1-5
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-jh4v-j34r-2mgh
+CVE-2026-XXXX [GHSA-mfwv-x733-9446]
+	- incus 7.0.1-5
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-mfwv-x733-9446
+CVE-2026-XXXX [GHSA-wfvq-qh87-gm4j]
+	- incus 7.0.1-5
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-wfvq-qh87-gm4j
+CVE-2026-XXXX [GHSA-443p-7392-h4v2]
+	- incus 7.0.1-5
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-443p-7392-h4v2
+CVE-2026-XXXX [GHSA-h85r-gjgx-g2rv]
+	- incus 7.0.1-5
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-h85r-gjgx-g2rv
+CVE-2026-XXXX [GHSA-27q7-qwhm-c34p]
+	- incus 7.0.1-5
+	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-27q7-qwhm-c34p
 CVE-2026-92288
 	- lemonldap-ng 2.23.4+ds-1
 	NOTE: https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/work_items/3719


=====================================
data/dsa-needed.txt
=====================================
@@ -64,6 +64,9 @@ gst-plugins-good1.0
 hplip
   security patches first need to be isolated
 --
+incus
+  Maintainer prepared update for review
+--
 jackson-databind
 --
 jetty9



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/58bcffe3be9a9c5dcfb1195f88489fb192d6bc21...a81efce6a2e3ef9df760d4e2dfe0d29d15de7ef1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/58bcffe3be9a9c5dcfb1195f88489fb192d6bc21...a81efce6a2e3ef9df760d4e2dfe0d29d15de7ef1
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260925/f30a7f8f/attachment.htm>