[Git][security-tracker-team/security-tracker][master] new qt-declarative issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
53ae457e by Moritz Muehlenhoff at 2026-09-28T13:02:31+02:00
new qt-declarative issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5318,7 +5318,10 @@ CVE-2026-80379 (IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote
 CVE-2026-80338 (The CMB2 WordPress plugin before 2.13.0 does not perform any capabilit ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-79616 (Out-of-bounds read while parsing untrusted SVG path strings in Qt Quic ...)
-	TODO: check
+	- qt6-declarative 6.11.2+dfsg-3
+	- qtdeclarative-opensource-src <unfixed>
+	NOTE: https://codereview.qt-project.org/c/qt/qtdeclarative/+/754718
+	NOTE: https://github.com/qt/qtdeclarative/commit/0aba8c7674dbbbaaa142775247249e297a339c85
 CVE-2026-79310 (webpy web.py 0.76 is vulnerable to server-side template injection (SST ...)
 	- web2py <unfixed>
 	NOTE: https://github.com/lichoin/TraceLoom/blob/main/CVEs/CVE-2026-79310.md



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/53ae457e2345bed18ace75c37c370a2f97d5e866

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/53ae457e2345bed18ace75c37c370a2f97d5e866
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260928/690796d6/attachment.htm>