[Git][security-tracker-team/security-tracker][master] bugnums
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Sun Sep 27 21:59:24 BST 2026
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
54a0dcb9 by Moritz Muehlenhoff at 2026-09-27T22:58:56+02:00
bugnums
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1356,64 +1356,64 @@ CVE-2026-6083 (Stored Cross-Site Scripting (XSS) vulnerability in StockAgile API
CVE-2026-6082 (Stored Cross-Site Scripting (XSS) vulnerability in StockAgile API and ...)
NOT-FOR-US: StockAgile
CVE-2026-67421 (RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.1 ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-6256-27fm-4rgr
NOTE: https://github.com/rabbitmq/rabbitmq-server/commit/ff595eaaa6d4f580f72fa04801ffd35f48c46027 (v4.3.5)
CVE-2026-67420 (RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.1 ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-86fm-44m9-rqjx
NOTE: https://github.com/rabbitmq/rabbitmq-server/commit/5de287d213765ca592ff5848ad2f6b9b98ee6772 (v4.3.5)
CVE-2026-67419 (RabbitMQ is a messaging and streaming broker. Prior to 4.3.5, an authe ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
[trixie] - rabbitmq-server <not-affected> (Vulnerable code not present, only affects 4.3.x)
[bookworm] - rabbitmq-server <not-affected> (Vulnerable code not present, only affects 4.3.x)
NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-h964-v5mf-22cq
NOTE: https://github.com/rabbitmq/rabbitmq-server/commit/c5ed7c4e97e02be688730803604cc7a88dbe4864 (v4.3.5)
CVE-2026-67415 (RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 a ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
[trixie] - rabbitmq-server <not-affected> (Vulnerable code not present, only affects 4.2.x and later)
[bookworm] - rabbitmq-server <not-affected> (Vulnerable code not present, only affects 4.2.x and later)
NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-8mpg-qw9r-m5cr
CVE-2026-67413 (RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.23, ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-chxf-3hfg-j8f7
CVE-2026-67412 (RabbitMQ is a messaging and streaming broker. From 3.13.0 until 4.3.3, ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-42pc-678q-v8qj
CVE-2026-67411 (RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.1 ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-4r6f-9cpw-f6g6
CVE-2026-67410 (RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.3.3 a ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
[trixie] - rabbitmq-server <not-affected> (Vulnerable code not present, only affects 4.2.x and later)
[bookworm] - rabbitmq-server <not-affected> (Vulnerable code not present, only affects 4.2.x and later)
NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-f9f2-q3jf-wfj3
CVE-2026-67409 (RabbitMQ is a messaging and streaming broker. From 3.13.0 until 4.3.3, ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-qw3h-qqm9-jrw8
CVE-2026-67408 (RabbitMQ is a messaging and streaming broker. From 4.1.0 until 4.3.3, ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
[trixie] - rabbitmq-server <not-affected> (Vulnerable code not present, only affects 4.1.x and later)
[bookworm] - rabbitmq-server <not-affected> (Vulnerable code not present, only affects 4.1.x and later)
NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-2hm4-4438-49q8
CVE-2026-67407 (RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3 a ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-q46v-hrvq-hp24
CVE-2026-67406 (RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3, ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-q44f-9vc5-grh7
CVE-2026-67242 (RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 a ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
[trixie] - rabbitmq-server <not-affected> (Vulnerable code not present, only affects 4.2.x and later)
[bookworm] - rabbitmq-server <not-affected> (Vulnerable code not present, only affects 4.2.x and later)
NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-rrj4-g94f-rqj9
CVE-2026-67241 (RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 a ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
[trixie] - rabbitmq-server <not-affected> (Vulnerable code not present, only affects 4.2.x and later)
[bookworm] - rabbitmq-server <not-affected> (Vulnerable code not present, only affects 4.2.x and later)
NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-rg2g-289m-xhhw
CVE-2026-67239 (RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.1 ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-xm9p-57xv-vxwc
CVE-2026-67237 (RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 a ...)
- rabbitmq-server 4.3.2-1
@@ -1443,7 +1443,7 @@ CVE-2026-67225 (RabbitMQ is a messaging and streaming broker. From 3.13.0 until
- rabbitmq-server 4.3.0-2
NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-c8c4-gvv4-8j3q
CVE-2026-67223 (RabbitMQ is a messaging and streaming broker. The advisory establishes ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-9x7r-g78c-5835
CVE-2026-67222 (RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.1 ...)
- rabbitmq-server 4.3.0-2
@@ -1480,7 +1480,7 @@ CVE-2026-62062 (Cross-Site Request Forgery (CSRF) vulnerability in Elementor Web
CVE-2026-61855 (Zammad is a web based open source helpdesk/customer support system. In ...)
- zammad <itp> (bug #841355)
CVE-2026-61837 (RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3, ...)
- - rabbitmq-server <unfixed>
+ - rabbitmq-server <unfixed> (bug #1149180)
NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-w9hf-476r-443x
CVE-2026-61525 (Zammad is a web based open source helpdesk/customer support system. In ...)
- zammad <itp> (bug #841355)
@@ -17957,7 +17957,7 @@ CVE-2026-19774 (BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vul
NOTE: https://github.com/bluez/bluez/pull/2251
NOTE: Fixed by: https://github.com/bluez/bluez/commit/912f5efb0dd9bb08e408d33371a57182c5678aef (5.87)
CVE-2026-19773 (libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Rem ...)
- - libwebsockets <unfixed>
+ - libwebsockets <unfixed> (bug #1149178)
NOTE: https://www.zerodayinitiative.com/advisories/ZDI-26-590/
NOTE: Fixed by: https://github.com/warmcat/libwebsockets/commit/824151862f37bc72f46d9a3e01d5b9408d313a0b (v5.0.0)
CVE-2026-19641 (On affected platforms running Arista EOS with password authentication ...)
@@ -129181,7 +129181,7 @@ CVE-2026-42347
CVE-2026-41917 (OpenKM 6.3.12 contains a local file inclusion vulnerability in the adm ...)
NOT-FOR-US: OpenKM
CVE-2026-41401 (libyang before 5.2.6 contains a heap use-after-free write vulnerabilit ...)
- - libyang <unfixed>
+ - libyang <unfixed> (bug #1149179)
[trixie] - libyang <no-dsa> (Minor issue)
[bullseye] - libyang <no-dsa> (Minor issue)
- libyang2 <removed>
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/54a0dcb95fadcada2179aef7709a9eca7432011e
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/54a0dcb95fadcada2179aef7709a9eca7432011e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260927/e47c43bd/attachment.htm>
More information about the debian-security-tracker-commits
mailing list