[Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Mon Sep 28 20:12:52 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
a81a53ff by security tracker role at 2026-09-28T19:12:45+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,35 +1,421 @@
-CVE-2026-85644
+CVE-2026-97686 (Wind River VxWorks 7 prior to 26.09, specific system call arguments ca ...)
+ TODO: check
+CVE-2026-97399 (The strncasecmp function in the GNU C Library 2.24 and later optimized ...)
+ TODO: check
+CVE-2026-97335 (Incorrect authorization in the custom storage volume creation endpoint ...)
+ TODO: check
+CVE-2026-96740 (A flaw was found in the StreamsHub Console for Apache Kafka. Tenant-su ...)
+ TODO: check
+CVE-2026-96538 (WarehousePG (WHPG) 7.x before 7.6.0-WHPG is affected by a missing auth ...)
+ TODO: check
+CVE-2026-95104 (Stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi prod ...)
+ TODO: check
+CVE-2026-94287 (A denial of service via unsigned underflow in libXpm's write path in l ...)
+ TODO: check
+CVE-2026-94286 (An out-of-bounds read in libXtst's RECORD reply parser in libXtst befo ...)
+ TODO: check
+CVE-2026-94285 (An out-of-bounds read in libX11's byte-oriented codeset parser in libX ...)
+ TODO: check
+CVE-2026-94284 (An out-of-bounds read vulnerability in libX11's XIM trigger-key regist ...)
+ TODO: check
+CVE-2026-94283 (An out-of-bounds read vulnerability in libX11's XIM (X Input Method) a ...)
+ TODO: check
+CVE-2026-94194 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response S ...)
+ TODO: check
+CVE-2026-93540 (A privilege mismatch was found in Fleet. When a bundle requested names ...)
+ TODO: check
+CVE-2026-93539 (A vulnerability was discovered in Fleet's Git webhook receiver (the gi ...)
+ TODO: check
+CVE-2026-93538 (A cross-tenant authorization issue was discovered in SUSE Rancher Flee ...)
+ TODO: check
+CVE-2026-93537 (A user who can supply bundle content to a repository referenced by a G ...)
+ TODO: check
+CVE-2026-93348 (Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsl ...)
+ TODO: check
+CVE-2026-92103 (Allocation of Resources Without Limits or Throttling vulnerability in ...)
+ TODO: check
+CVE-2026-91206 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-91204 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-91154 (Missing Authentication for Critical Function (CWE-306) in the product ...)
+ TODO: check
+CVE-2026-91043 (Allocation of Resources Without Limits or Throttling vulnerability in ...)
+ TODO: check
+CVE-2026-90926 (Improper Control of Generation of Code ('Code Injection') vulnerabilit ...)
+ TODO: check
+CVE-2026-90925 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
+ TODO: check
+CVE-2026-90924 (Use of default credentials vulnerability in Innotim Software, Telecomm ...)
+ TODO: check
+CVE-2026-88808 (A vulnerability has been identified within Rancher Manager where the F ...)
+ TODO: check
+CVE-2026-88805 (Incorrect credential cleaning on logout could be used by remote attack ...)
+ TODO: check
+CVE-2026-88804 (An unauthenticated update of public UI settings could be used by remot ...)
+ TODO: check
+CVE-2026-87969 (An OS command injection vulnerability in the WatchGuard AP diagnostic ...)
+ TODO: check
+CVE-2026-87799 (Improper link resolution in the migration receive path in Canonical LX ...)
+ TODO: check
+CVE-2026-87798 (Improper link resolution in the recursive file pull feature of the LXD ...)
+ TODO: check
+CVE-2026-87752 (Improper neutralization of input during web page generation ('cross-si ...)
+ TODO: check
+CVE-2026-87114 (A flaw was found in kube-compare. When processing a 'container://' ref ...)
+ TODO: check
+CVE-2026-86595 (Improper neutralization of special elements used in an SQL command ('S ...)
+ TODO: check
+CVE-2026-86530 (BUFFALO Wi-Fi products handle some web form input improperly to assemb ...)
+ TODO: check
+CVE-2026-86507 (Improper neutralization of input in Apache Roller 6.1.5 allows an anon ...)
+ TODO: check
+CVE-2026-86335 (Missing Authorization in imageDownload in Canonical LXD before 5.0.10, ...)
+ TODO: check
+CVE-2026-86334 (Path traversal in the CLI client image export and copy functionality i ...)
+ TODO: check
+CVE-2026-86330 (An OS command injection flaw was found in the set_hostname_internal fu ...)
+ TODO: check
+CVE-2026-86102 (An OS command injection vulnerability in the WatchGuard AP internal AP ...)
+ TODO: check
+CVE-2026-85526 (Path traversal in the Btrfs storage driver (unpackVolume) in Canonical ...)
+ TODO: check
+CVE-2026-85185 (Path traversal in the btrfs storage driver in Canonical LXD versions 4 ...)
+ TODO: check
+CVE-2026-85134 (Unrestricted upload of file with dangerous type vulnerability in Bimse ...)
+ TODO: check
+CVE-2026-84894 (In moxygen before commit 004123dd24c3, MoQSession::dataStreamReadLoop ...)
+ TODO: check
+CVE-2026-82969 (Improper neutralization of input during web page generation ('cross-si ...)
+ TODO: check
+CVE-2026-82936 (mH-DEVELOPER smart home module is vulnerable to Denial of Service due ...)
+ TODO: check
+CVE-2026-82935 (mH-DEVELOPER smart home module ships with an end-of-life, unsupported ...)
+ TODO: check
+CVE-2026-82933 (mH-DEVELOPER smart home module sends its web interface and API traffic ...)
+ TODO: check
+CVE-2026-82932 (mH-DEVELOPER smart home module does not load any firewall rules at sta ...)
+ TODO: check
+CVE-2026-82930 (mH-DEVELOPER smart home module does not verify tokens in its authoriza ...)
+ TODO: check
+CVE-2026-82929 (mH-DEVELOPER smart home module uses the same hard-coded SSH host keys ...)
+ TODO: check
+CVE-2026-82928 (mH-DEVELOPER smart home module contains a hardcoded SSH public key in ...)
+ TODO: check
+CVE-2026-82915 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
+ TODO: check
+CVE-2026-82546 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-82387 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-82386 (Improper Restriction of XML External Entity Reference in Apache Roller ...)
+ TODO: check
+CVE-2026-82385 (Exposure of Sensitive Information to an Unauthorized Actor in Apache R ...)
+ TODO: check
+CVE-2026-82384 (Deserialization of Untrusted Data in Apache Roller 6.1.5 allows an una ...)
+ TODO: check
+CVE-2026-82383 (Missing Authentication for Critical Function in Apache Roller 6.1.5 al ...)
+ TODO: check
+CVE-2026-82382 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-82381 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-82380 (Cross-Site Request Forgery (CSRF) in Apache Roller 6.1.5 allows a remo ...)
+ TODO: check
+CVE-2026-82379 (Authentication Bypass by Capture-replay in Apache Roller 6.1.5 allows ...)
+ TODO: check
+CVE-2026-82378 (Incorrect Authorization in the OAuth 1.0a authorization endpoint of Ap ...)
+ TODO: check
+CVE-2026-82377 (Missing Authorization in Apache Roller 6.1.5 allows an authenticated u ...)
+ TODO: check
+CVE-2026-82376 (Improper Restriction of XML External Entity Reference in Apache Roller ...)
+ TODO: check
+CVE-2026-82375 (Server-Side Request Forgery (SSRF) in Apache Roller 6.1.5 allows an au ...)
+ TODO: check
+CVE-2026-82348 (Authorization Bypass Through User-Controlled Key in Apache Roller 6.1. ...)
+ TODO: check
+CVE-2026-82326 (Improper neutralization of input during web page generation ('cross-si ...)
+ TODO: check
+CVE-2026-82323 (Authorization bypass through User-Controlled key vulnerability in Enoc ...)
+ TODO: check
+CVE-2026-81867 (A Deserialization of Untrusted Data vulnerability in the JavaScript Ta ...)
+ TODO: check
+CVE-2026-81375 (A Confused Deputy vulnerability in the EmailTask component in Google C ...)
+ TODO: check
+CVE-2026-80359 (Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.20 ...)
+ TODO: check
+CVE-2026-80358 (Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.20 ...)
+ TODO: check
+CVE-2026-80357 (Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.20 ...)
+ TODO: check
+CVE-2026-7172 (Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the followi ...)
+ TODO: check
+CVE-2026-7171 (Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the followi ...)
+ TODO: check
+CVE-2026-7170 (Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the followi ...)
+ TODO: check
+CVE-2026-78424 (Improper parameter handling in NeuVector allows any authenticated user ...)
+ TODO: check
+CVE-2026-75600 (FreePBX is an open source IP PBX. Prior to version 17.0.9, authenticat ...)
+ TODO: check
+CVE-2026-73642 (Dayforce Payroll is vulnerable to Path Traversal in file download func ...)
+ TODO: check
+CVE-2026-73641 (Dayforce Payroll is vulnerable to Reflected XSS in multiple endpoints. ...)
+ TODO: check
+CVE-2026-73640 (Dayforce Payroll is vulnerable to Time Based-Blind SQL Injection in pa ...)
+ TODO: check
+CVE-2026-70413 (Dell Live Optics Collector, versions prior to 27.2.13.310, contain(s) ...)
+ TODO: check
+CVE-2026-59563 (Zscaler MCP Server versions 0.7.0 and 0.7.1 has an issue where HMAC co ...)
+ TODO: check
+CVE-2026-58464
+ REJECTED
+CVE-2026-58463
+ REJECTED
+CVE-2026-55160 (Stringer is a self-hosted, anti-social RSS reader. Prior to commit 75c ...)
+ TODO: check
+CVE-2026-55157 (Token Optimizer MCP measures token savings per AI coding agent, optimi ...)
+ TODO: check
+CVE-2026-55156 (Token Optimizer MCP measures token savings per AI coding agent, optimi ...)
+ TODO: check
+CVE-2026-55096 (fast-mcp-telegram is a Telegram MCP Server. Prior to version 30.1, the ...)
+ TODO: check
+CVE-2026-54710 (FreePBX is an open source IP PBX. Prior to versions 16.0.40 and 17.0.7 ...)
+ TODO: check
+CVE-2026-54708 (FreePBX is an open source IP PBX. Prior to versions 16.0.72 and 17.0.7 ...)
+ TODO: check
+CVE-2026-54675 (FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5 ...)
+ TODO: check
+CVE-2026-54674 (FreePBX is an open source IP PBX. Prior to versions 16.0.39 and 17.0.7 ...)
+ TODO: check
+CVE-2026-54160 (Network UPS Tools is a collection of programs which provide a common i ...)
+ TODO: check
+CVE-2026-52749 (The Kaon AR2140X router improperly issues session cookies in responses ...)
+ TODO: check
+CVE-2026-52748 (The Kaon AR2140X router contains a vulnerability where the backup func ...)
+ TODO: check
+CVE-2026-4556 (Exam4 is affected by a local privilege escalation vulnerability in the ...)
+ TODO: check
+CVE-2026-49994 (Bluehood monitors local bluetooth activity. Prior to version 0.7.1, wh ...)
+ TODO: check
+CVE-2026-48100 (Payy is an Ethereum L2 zk-rollup for privacy preserving and regulatory ...)
+ TODO: check
+CVE-2026-45562 (FreePBX is an open source IP PBX. Prior to versions 16.0.4 and 17.0.6, ...)
+ TODO: check
+CVE-2026-19759 (An Incorrect Authorization vulnerabilityin the task configuration in G ...)
+ TODO: check
+CVE-2026-19444 (A path traversal vulnerability was discovered in the Kuberneteskubectl ...)
+ TODO: check
+CVE-2026-18825 (An Origin Validation Error in the middleware of the connect-xcors npm ...)
+ TODO: check
+CVE-2026-15953 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
+ TODO: check
+CVE-2026-15952 (Incorrect Permission Assignment for Critical Resource vulnerability in ...)
+ TODO: check
+CVE-2026-13018 (Insufficient validation of untrusted input in Codecs in Google Chrome ...)
+ TODO: check
+CVE-2026-12342 (This vulnerability impacts all versions of IdentityIQ and allows an un ...)
+ TODO: check
+CVE-2026-12269 (Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepali ...)
+ TODO: check
+CVE-2026-12268 (ManageEngine DDI Central versions below 6201 are vulnerable toPowerShe ...)
+ TODO: check
+CVE-2026-12267 (ManageEngine DDI Central versions below 6201 are vulnerable toCommand ...)
+ TODO: check
+CVE-2026-12265 (Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable ...)
+ TODO: check
+CVE-2026-12264 (Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable ...)
+ TODO: check
+CVE-2026-102010 (A flaw was found in GCC. When an application calls the erase_if functi ...)
+ TODO: check
+CVE-2026-101913 (ip-address is a library for parsing and manipulating IPv4 and IPv6 add ...)
+ TODO: check
+CVE-2026-101912 (ip-address is a library for parsing and manipulating IPv4 and IPv6 add ...)
+ TODO: check
+CVE-2026-101911 (ip-address is a library for parsing and manipulating IPv4 and IPv6 add ...)
+ TODO: check
+CVE-2026-101910 (ip-address is a library for parsing and manipulating IPv4 and IPv6 add ...)
+ TODO: check
+CVE-2026-101909 (Axios is a promise-based HTTP client for the browser and Node.js. From ...)
+ TODO: check
+CVE-2026-101908 (Axios is a promise-based HTTP client for the browser and Node.js. From ...)
+ TODO: check
+CVE-2026-101907 (Axios is a promise-based HTTP client for the browser and Node.js. From ...)
+ TODO: check
+CVE-2026-101906 (Axios is a promise-based HTTP client for the browser and Node.js. From ...)
+ TODO: check
+CVE-2026-101905 (Axios is a promise-based HTTP client for the browser and Node.js. From ...)
+ TODO: check
+CVE-2026-101904 (Axios is a promise-based HTTP client for the browser and Node.js. From ...)
+ TODO: check
+CVE-2026-101903 (Axios is a promise-based HTTP client for the browser and Node.js. From ...)
+ TODO: check
+CVE-2026-101902 (Axios is a promise-based HTTP client for the browser and Node.js. From ...)
+ TODO: check
+CVE-2026-101901 (Axios is a promise-based HTTP client for the browser and Node.js. From ...)
+ TODO: check
+CVE-2026-101900 (Axios is a promise-based HTTP client for the browser and Node.js. From ...)
+ TODO: check
+CVE-2026-101898 (Axios is a promise-based HTTP client for the browser and Node.js. From ...)
+ TODO: check
+CVE-2026-101894 (The decompress package for Node.js extracts archives. Prior to 10.2.2 ...)
+ TODO: check
+CVE-2026-101891 (An improper access control vulnerability in an internal API service on ...)
+ TODO: check
+CVE-2026-101861 (Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsa ...)
+ TODO: check
+CVE-2026-101333 (A flaw was found in the Micrometer user-event metrics listener of Keyc ...)
+ TODO: check
+CVE-2026-101292 (Apache ActiveMQ Artemis before 2.34.0 contains an unsafe reflection vu ...)
+ TODO: check
+CVE-2026-101132 (A security flaw has been discovered in DeepSeek deepseek-harness up to ...)
+ TODO: check
+CVE-2026-101131 (A vulnerability was identified in deepseek-ai deepseek-harness up to 0 ...)
+ TODO: check
+CVE-2026-101111 (Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Bo ...)
+ TODO: check
+CVE-2026-101110 (Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Boo ...)
+ TODO: check
+CVE-2026-101109 (Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Ve ...)
+ TODO: check
+CVE-2026-101108 (Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Veh ...)
+ TODO: check
+CVE-2026-101105 (A vulnerability was determined in code-projects Matrimonial System 1.0 ...)
+ TODO: check
+CVE-2026-101102 (A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0- ...)
+ TODO: check
+CVE-2026-101101 (A vulnerability has been found in ag-ui-protocol ag-ui up to 2026-09-0 ...)
+ TODO: check
+CVE-2026-101100 (A flaw has been found in ag-ui-protocol ag-ui up to 2026-09-07. This v ...)
+ TODO: check
+CVE-2026-101099 (A vulnerability was detected in ag-ui-protocol ag-ui up to 2026-09-23. ...)
+ TODO: check
+CVE-2026-101098 (A security vulnerability has been detected in ag-ui-protocol ag-ui up ...)
+ TODO: check
+CVE-2026-101083 (A security vulnerability has been detected in PMWeb v7.x/v8.x/v2025.x. ...)
+ TODO: check
+CVE-2026-101082 (A weakness has been identified in PMWeb 7.x/8.x/2025.x. This issue aff ...)
+ TODO: check
+CVE-2026-101081 (A security flaw has been discovered in D-Link DI-8400 16.07. This vuln ...)
+ TODO: check
+CVE-2026-101080 (A vulnerability was identified in Tencent AI-Infra-Guard up to 4.5.2/4 ...)
+ TODO: check
+CVE-2026-101079 (A vulnerability was found in agentverus agentverus-scanner up to 0.8.1 ...)
+ TODO: check
+CVE-2026-101078 (A vulnerability has been found in deepseek-ai deepseek-harness up to 0 ...)
+ TODO: check
+CVE-2026-101077 (A flaw has been found in Netcore NR289-GE 1.4.5102. This impacts the f ...)
+ TODO: check
+CVE-2026-101076 (A vulnerability was detected in Netcore NR289-GE 1.4.5102. This affect ...)
+ TODO: check
+CVE-2026-101075 (A security vulnerability has been detected in Netcore NR289-GE 1.4.510 ...)
+ TODO: check
+CVE-2026-101074 (A weakness has been identified in Netcore NR289-GE 1.4.5102. The affec ...)
+ TODO: check
+CVE-2026-101073 (A security flaw has been discovered in Netcore NR289-GE 1.4.5102. Impa ...)
+ TODO: check
+CVE-2026-101072 (A vulnerability was identified in Netcore NR289-GE 1.4.5102. This issu ...)
+ TODO: check
+CVE-2026-101071 (A vulnerability was determined in Acrel Electric Unet Web Service up t ...)
+ TODO: check
+CVE-2026-101070 (A security vulnerability has been detected in dbgate up to 7.3.1. Affe ...)
+ TODO: check
+CVE-2026-101069 (A weakness has been identified in dbgate up to 7.3.1. Affected is the ...)
+ TODO: check
+CVE-2026-101068 (A security flaw has been discovered in dbgate up to 7.3.1. This impact ...)
+ TODO: check
+CVE-2026-101067 (A vulnerability was identified in dbgate up to 6.8.1/7.0.2/7.1.8/7.2.5 ...)
+ TODO: check
+CVE-2026-101066 (A vulnerability was determined in dbgate up to 7.3.1. The impacted ele ...)
+ TODO: check
+CVE-2026-101055 (A security flaw has been discovered in Thinkware U3000 up to 1.02.04. ...)
+ TODO: check
+CVE-2026-101054 (A vulnerability was identified in Thinkware U3000 up to 1.02.04. Affec ...)
+ TODO: check
+CVE-2026-101053 (A vulnerability was determined in Thinkware U3000 up to 1.02.04. This ...)
+ TODO: check
+CVE-2026-101052 (A security vulnerability has been detected in refly-ai refly up to 1.1 ...)
+ TODO: check
+CVE-2026-101040 (A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252 ...)
+ TODO: check
+CVE-2026-101039 (A vulnerability was identified in FAST FAC1900R 20190827_2.0.2. Affect ...)
+ TODO: check
+CVE-2026-101038 (A vulnerability was determined in FAST FAC1200R 5.0_20201119_1.0.2. Af ...)
+ TODO: check
+CVE-2026-101037 (A vulnerability was found in FAST FAC1200R 5.0_20201119_1.0.2. Affecte ...)
+ TODO: check
+CVE-2026-101036 (A vulnerability has been found in FLB-Music FLB-Music-Player 1.1.8/1.1 ...)
+ TODO: check
+CVE-2026-101035 (A flaw has been found in aligungr UERANSIM up to 3.3.0. This affects t ...)
+ TODO: check
+CVE-2026-101018 (A vulnerability was determined in dayrui XunruiCMS up to 4.7.2. This i ...)
+ TODO: check
+CVE-2026-101017 (A vulnerability was found in Trusted Domain Project OpenDMARC up to 1. ...)
+ TODO: check
+CVE-2026-101016 (A vulnerability has been found in Trusted Domain Project OpenDMARC up ...)
+ TODO: check
+CVE-2026-101015 (A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. ...)
+ TODO: check
+CVE-2026-101014 (A vulnerability was detected in Trusted Domain Project OpenDMARC up to ...)
+ TODO: check
+CVE-2026-101013 (A security vulnerability has been detected in mathurvishal CloudClassr ...)
+ TODO: check
+CVE-2026-101012 (A weakness has been identified in mathurvishal CloudClassroom-PHP-Proj ...)
+ TODO: check
+CVE-2026-101011 (A security flaw has been discovered in aaPanel BaoTa up to 11.8.0. Thi ...)
+ TODO: check
+CVE-2026-101010 (A vulnerability was identified in aaPanel BaoTa up to 11.8.0. The impa ...)
+ TODO: check
+CVE-2026-101009 (A vulnerability was determined in aaPanel BaoTa up to 11.8.0. The affe ...)
+ TODO: check
+CVE-2026-101008 (A vulnerability was found in aaPanel BaoTa up to 11.8.0. Impacted is t ...)
+ TODO: check
+CVE-2026-100753 (Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Re ...)
+ TODO: check
+CVE-2026-100752 (Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Rea ...)
+ TODO: check
+CVE-2026-100751 (Joomla Extension - regularlabs.com - Privileged stored XSS via data-rl ...)
+ TODO: check
+CVE-2026-100750 (Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1. ...)
+ TODO: check
+CVE-2026-85644 (XS::Parse::Infix versions from 0.40 through 0.49 for Perl treat a numb ...)
- libxs-parse-keyword-perl <unfixed> (bug #1149243)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/43916020/
NOTE: https://metacpan.org/release/PEVANS/XS-Parse-Keyword-0.50/diff/PEVANS/XS-Parse-Keyword-0.49/src/infix.c
-CVE-2026-91006
+CVE-2026-91006 (Apache Karaf's instance-management service (InstanceServiceImpl) build ...)
- apache-karaf <itp> (bug #881297)
CVE-2026-92142
- apache-karaf <itp> (bug #881297)
CVE-2026-91085
- apache-karaf <itp> (bug #881297)
-CVE-2026-90979
+CVE-2026-90979 (LDAPCacheandLDAPBackingEnginebuild LDAP search filters for user lookup ...)
- apache-karaf <itp> (bug #881297)
CVE-2026-91012
- apache-karaf <itp> (bug #881297)
CVE-2026-91048
- apache-karaf <itp> (bug #881297)
CVE-2026-97024
+ {DSA-6524-1}
- flatpak 1.18.4-1
NOTE: https://github.com/flatpak/flatpak/security/advisories/GHSA-8xgq-v545-vgvf
-CVE-2026-97023
+CVE-2026-97023 (A path traversal vulnerability in Flatpak's handling of the export/bin ...)
+ {DSA-6524-1}
- flatpak 1.18.4-1
NOTE: https://github.com/flatpak/flatpak/security/advisories/GHSA-5p67-xh8x-rq54
CVE-2026-97025
+ {DSA-6524-1}
- flatpak 1.18.4-1
NOTE: https://github.com/flatpak/flatpak/security/advisories/GHSA-7rvf-rqr3-43j4
CVE-2026-97026
+ {DSA-6524-1}
- flatpak 1.18.4-1
NOTE: https://github.com/flatpak/flatpak/security/advisories/GHSA-r9w3-qx54-qvc8
CVE-2026-97027
+ {DSA-6524-1}
- flatpak 1.18.4-1
NOTE: https://github.com/flatpak/flatpak/security/advisories/GHSA-v64f-hrwr-j4vh
CVE-2026-97029
+ {DSA-6524-1}
- flatpak 1.18.4-1
NOTE: https://github.com/flatpak/flatpak/security/advisories/GHSA-f3p8-vr7v-gxf2
CVE-2026-XXXX [GHSA-r9hj-j2rw-4q3m: PCRE2: out-of-bounds write in JIT matching with large stack allocations]
@@ -3448,7 +3834,7 @@ CVE-2026-94604
REJECTED
CVE-2026-94416 (An authorization bypass was found in the Ansible Automation Platform ( ...)
NOT-FOR-US: Red Hat Ansible Automation Platform
-CVE-2026-94282
+CVE-2026-94282 (An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversi ...)
- libxi <unfixed> (bug #1148965)
[trixie] - libxi <no-dsa> (Minor issue)
[bookworm] - libxi <postponed> (Minor issue)
@@ -3908,11 +4294,11 @@ CVE-2026-97404 (In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the
- zaqar 23.0.0~rc1-3 (bug #1148897)
[trixie] - zaqar <no-dsa> (Minor issue)
NOTE: https://security.openstack.org/ossa/OSSA-2026-042.html
-CVE-2026-88816 [Fix FetchHashKeyName on IV/NV]
+CVE-2026-88816 (DBI versions before 1.654 for Perl incorrectly treat numeric values as ...)
- libdbi-perl 1.654-1 (bug #1149042)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/43915934/
NOTE: Fixed by: https://github.com/perl5-dbi/dbi/commit/70962570212dc60a5428098cf2a0462ad5945851 (1.654)
-CVE-2026-88815 [Fix DBI::sql_type_cast on IV/NV]
+CVE-2026-88815 (DBI versions before 1.654 for Perl incorrectly treat numeric values as ...)
- libdbi-perl 1.654-1 (bug #1149042)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/43915930/
NOTE: Fixed by: https://github.com/perl5-dbi/dbi/commit/e5ad87e5602da995d28b4d65df222368b58d6702 (1.654)
@@ -5080,7 +5466,7 @@ CVE-2026-93368 (The Rename wp-login.php to anything you want plugin for WordPres
NOT-FOR-US: WordPress plugin
CVE-2026-93352 (Laravel-Mediable 7.0.0 before 7.0.2 contains an incomplete patch for C ...)
NOT-FOR-US: Laravel-Mediable
-CVE-2026-93349 (Frictionless through 5.20.0rc1 contains an OS command injection vulner ...)
+CVE-2026-93349 (Frictionless before 5.19.1 contains an OS command injection vulnerabil ...)
NOT-FOR-US: Frictionless
CVE-2026-92874 (GitLab has remediated an issue in GitLab CE/EE affecting all versions ...)
NOT-FOR-US: GitLab (used to be packaged in the Debian archive as src:gitlab, but never in a stable release)
@@ -7105,6 +7491,7 @@ CVE-2026-88414 (MCMS 6.1.1 through 6.2.1 contains a SQL injection vulnerability
CVE-2026-88010 (Traefik is an open source HTTP reverse proxy and load balancer. From 3 ...)
- traefik <itp> (bug #983289)
CVE-2026-87902 (An unauthenticated attacker can make `get_page_template()` page-templa ...)
+ {DSA-6525-1}
- wordpress 7.1.2+dfsg1-1 (bug #1148743)
NOTE: https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-7hp8-65ch-5whp
CVE-2026-87119 (Authentication Bypass by Capture-replay in ZenHive mpp allows an attac ...)
@@ -8539,7 +8926,7 @@ CVE-2026-93992 (Gopeed through 2.0.0-beta.3 contains a path traversal vulnerabil
NOT-FOR-US: Gopeed
CVE-2026-93991 (Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization b ...)
NOT-FOR-US: Argo Workflows
-CVE-2026-93990 (Expat through 2.8.4 fails to validate low surrogates following high su ...)
+CVE-2026-93990 (Expat before 2.8.5 fails to validate that a high surrogate in UTF-16 i ...)
- expat 2.8.4-2 (bug #1148665)
NOTE: https://github.com/libexpat/libexpat/pull/1282
NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/0cfd15bdf4b2c22d6b0df73610709dfb60921091 (R_2_8_5)
@@ -9467,18 +9854,22 @@ CVE-2026-84449 (libheif is a HEIF and AVIF file format decoder and encoder. Prio
NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-2c3g-p585-8rpq
NOTE: Fixed by: https://github.com/strukturag/libheif/commit/e29953da30eb11aa1762df0bff3b36be4b22fbe3 (v1.19.6)
CVE-2026-84448 (libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1 ...)
+ {DSA-6523-1}
- libheif 1.23.2-1
NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-p58j-h3vm-3fp5
NOTE: Fixed by: https://github.com/strukturag/libheif/commit/646d85fbf5bd18fc3cdc516e915e59072de2d510 (v1.23.2)
CVE-2026-84447 (libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.1 ...)
+ {DSA-6523-1}
- libheif 1.23.2-1
NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-x8xm-cm2c-cfc8
NOTE: Fixed by: https://github.com/strukturag/libheif/commit/30b52a4e829efe0ee6d7208e8500b99f664af5e9 (v1.23.2)
CVE-2026-84446 (libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1 ...)
+ {DSA-6523-1}
- libheif 1.23.2-1
NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-xw34-mjcp-jqh8
NOTE: Fixed by: https://github.com/strukturag/libheif/commit/3a7a69ae325f652e48c026b8241ab25bedf44d9b (v1.23.2)
CVE-2026-84444 (libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1 ...)
+ {DSA-6523-1}
- libheif 1.23.2-1
NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-j264-xvrp-5v7q
NOTE: Fixed by: https://github.com/strukturag/libheif/commit/e65071f59a1ac08aa1eb0d07a831deaf6bb4d03b (v1.23.2)
@@ -9487,6 +9878,7 @@ CVE-2026-84400 (CareCam CM2507 IP cameras contain an insufficiently protected ne
CVE-2026-84398 (CM2507 IP cameras accept an empty password for a privileged account ex ...)
NOT-FOR-US: CM2507 IP cameras
CVE-2026-84384 (libheif is a HEIF and AVIF file format decoder and encoder. From 1.19. ...)
+ {DSA-6523-1}
- libheif 1.23.2-1
NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-24wx-9w62-c96w
NOTE: Fixed by: https://github.com/strukturag/libheif/commit/21893e8f66c8b79363ca2809391b07d35e1a95ec (v1.23.2)
@@ -9929,6 +10321,7 @@ CVE-2026-93018 (Imager versions before 1.036 for Perl disclose uninitialised hea
NOTE: https://github.com/tonycoz/imager/security/advisories/GHSA-j7v7-cm4g-vrgf
NOTE: Fixed by: https://github.com/tonycoz/imager/commit/dcf0a52e2732399d42ab44d98af6934658d068ee (v1.036)
CVE-2026-93485 (Improper neutralization of input during web page generation ('cross-si ...)
+ {DSA-6525-1}
- wordpress 7.1.1+dfsg1-1 (bug #1148368)
NOTE: https://wordpress.org/news/2026/09/wordpress-7-1-1-maintenance-and-security-release/
CVE-2026-93468 (The OAKlouds developed by HGiga has an Arbitrary File Read vulnerabili ...)
@@ -33093,6 +33486,7 @@ CVE-2026-80726 (In the Linux kernel, the following vulnerability has been resolv
[trixie] - linux 6.12.105-1
NOTE: https://git.kernel.org/linus/5ec42d57655c690234c14aece6dd3f209778c1d8 (7.2-rc7)
CVE-2026-84450 (libheif is a HEIF and AVIF file format decoder and encoder. From 1.19. ...)
+ {DSA-6523-1}
- libheif 1.23.3-1
NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-gh5q-69gg-c964
CVE-2026-XXXX [GHSA-x8r2-mggj-j6wr: Heap buffer overflow in unci mixed-interleave decoding with unequal chroma bit depths]
@@ -33104,6 +33498,7 @@ CVE-2026-XXXX [GHSA-8fmq-r4pf-7m57: decoder deadlock (DoS) via alpha-aux referen
[bookworm] - libheif <not-affected> (Introduced in 1.22)
NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-8fmq-r4pf-7m57
CVE-2026-84451 (libheif is a HEIF and AVIF file format decoder and encoder. From 1.19. ...)
+ {DSA-6523-1}
- libheif 1.23.3-1
NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-hh47-fhqr-cj2r
CVE-2026-XXXX [GHSA-w7mc-p8jc-p853: heap OOB read / info disclosure (Op_YCbCr420_to_RRGGBBaa]
@@ -37442,6 +37837,7 @@ CVE-2026-75758 (Uncontrolled Recursion vulnerability in the Elixir standard libr
CVE-2026-73827 (SOY Calendar contains a cross-site scripting vulnerability. An arbitra ...)
NOT-FOR-US: SOY
CVE-2026-73209 (An attacker that has valid credentials can send crafted compressed dat ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-73209-imap-login-crash-self-recursion-on-zero-output-decompress-chunks
NOTE: Fixed by: https://github.com/dovecot/core/commit/d0559b33adf1470547b6ee6ea7a82903296c5f69
@@ -37454,6 +37850,7 @@ CVE-2026-73209 (An attacker that has valid credentials can send crafted compress
NOTE: Fixed by: https://github.com/dovecot/core/commit/e9eb23933949f8cbdd13282071169dc89876c139
NOTE: Fixed by: https://github.com/dovecot/core/commit/f740e63144970ee36d3ca6d38e52b81d405c6f67
CVE-2026-73208 (An attacker that holds a token intended for a different purpose can au ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-73208-auth-db-oauth2-aud-claim-used-as-fallback-for-missing-scope-claim
NOTE: Same fixes for CVE-2026-40205 and CVE-2026-73208
@@ -37489,12 +37886,14 @@ CVE-2026-56854 (The source-address critical option in the Permissions returned b
NOTE: https://github.com/golang/go/issues/80213
NOTE: Fixed by: https://github.com/golang/crypto/commit/e557b08ec2b4f5dd00f38356919fc7b051dd88f8 (v0.55.0)
CVE-2026-52687 (An attacker that has valid credentials can select a compression algori ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-52687-imap-compress-zstd-can-cause-excessive-memory-usage
NOTE: Fixed by: https://github.com/dovecot/core/commit/65293cc0a6bc74f730b9ff036ec1e6456e671f88
NOTE: Fixed by: https://github.com/dovecot/core/commit/e58c15ba1486a055462f7a2853a4b6a954e0eafa
NOTE: Fixed by: https://github.com/dovecot/core/commit/b020b257c45d48c623db54909df4d3ae9b0975a1
CVE-2026-52681 (Sieve CPU resource usage is tracked in the compiled script, so an atta ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-52681-sieve-resource-usage-tracking-lost-when-active-script-changes
NOTE: Fixed by: https://github.com/dovecot/core/commit/8d52bc7d037cda5f27fe996511a5367752095812
@@ -37516,27 +37915,32 @@ CVE-2026-4378 (Improper neutralization of input during web page generation ('cro
CVE-2026-4246 (The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross ...)
NOT-FOR-US: WordPress plugin
CVE-2026-42395 (A host listed as a trusted proxy can send forwarding information conta ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-42395-single-nul-byte-xclient-forward-payload-crashes
NOTE: Fixed by: https://github.com/dovecot/core/commit/0a1adbe37e03e859681bab6186494600b1c708ac
NOTE: Fixed by: https://github.com/dovecot/core/commit/991780f2a9d567f9c2f4b136d96b0b35e1d8e9e1
CVE-2026-42393 (The comparison used for the doveadm password and API key is not fully ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-42393-doveadm-password-or-api-key-length-can-still-be-leaked-with-timing-comparisons
NOTE: Fixed by: https://github.com/dovecot/core/commit/17212df02d002be8b310d41205b32e04da666a4b
NOTE: Fixed by: https://github.com/dovecot/core/commit/647e76a865ba173f6182e211c57ec3c2942a6b04
CVE-2026-42392 (An attacker that has valid credentials can send an invalid IMAP URLFET ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
[bookworm] - dovecot <not-affected> (Vulnerable code not present, introduced in 2.4.0)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-42392-imap-urlauth-leaks-memory-into-user-visible-error-messages
NOTE: Fixed by: https://github.com/dovecot/core/commit/48d8141049f7150a0469a4efe68669fbf8bcbb24
NOTE: Introduced with: https://github.com/dovecot/core/commit/bb193c273e63ffa42c5c0b51ecd8860398e3beab (2.4.0)
CVE-2026-42391 (An unauthenticated attacker can send an IMAP ID command with a very la ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-42391-imap-pre-login-memory-cpu-growth-with-id-command
NOTE: Fixed by: https://github.com/dovecot/core/commit/277e5c880a7f6a7741e717036570812910fff7b7
NOTE: Fixed by: https://github.com/dovecot/core/commit/78518c10c7aa1236c1ed1ebb2d558ce24e6bc122
CVE-2026-42008 (Forwarding information received from a host listed as a trusted proxy ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-42008-xclient-forward-bare-token-not-namespaced-allows-nopassword-injection-via-trusted-proxy
NOTE: Fixed by: https://github.com/dovecot/core/commit/da832e63e91d640e9a4bc57189c488cd97d99477
@@ -37544,6 +37948,7 @@ CVE-2026-42008 (Forwarding information received from a host listed as a trusted
NOTE: Fixed by: https://github.com/dovecot/core/commit/335abc77650a69860ff522ba87e714173a4e6049
NOTE: Fixed by: https://github.com/dovecot/core/commit/7e60077cafabc3626a6bd7071b753e1c57415558
CVE-2026-42007 (An attacker that has valid credentials can use a Sieve script with the ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-42007-sieve-editheader-rce
NOTE: Fixed by: https://github.com/dovecot/pigeonhole/commit/69bac9cd6d4ac09100ee50c98052be1437f1da29
@@ -37552,6 +37957,7 @@ CVE-2026-42007 (An attacker that has valid credentials can use a Sieve script wi
CVE-2026-40541 (An improper neutralization of input during web page generation ('Cross ...)
NOT-FOR-US: Synology
CVE-2026-40205 (An attacker that holds an OAuth2 token granting only part of the requi ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-40205-oauth2-passdb-scope-enforcement-bypass-via-or-semantics-in-remote-validation-path
NOTE: Same fixes for CVE-2026-40205 and CVE-2026-73208
@@ -37559,6 +37965,7 @@ CVE-2026-40205 (An attacker that holds an OAuth2 token granting only part of the
NOTE: Fixed by: https://github.com/dovecot/core/commit/8518e3f62183b462bef645977b48af32e6701f6f
NOTE: Fixed by: https://github.com/dovecot/core/commit/91b7a86a20f805301e8ea15715b246040c4d8cd9
CVE-2026-40204 (None None None No publicly available exploits are known.)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-40204-acl-lda-mailbox-autocreate-can-bypass-acl-restrictions
NOTE: Fixed by: https://github.com/dovecot/core/commit/7f2fbf017c479af0363aa35b2cd2dca4b92e16d2
@@ -37566,6 +37973,7 @@ CVE-2026-40204 (None None None No publicly available exploits are known.)
NOTE: Fixed by: https://github.com/dovecot/pigeonhole/commit/f0dfa83a01194126d9a7688bcf30e730d5873b63
NOTE: Fixed by: https://github.com/dovecot/pigeonhole/commit/c211355da2ecdd2d858204468b12bd5667a44e30
CVE-2026-40203 (When IMAP compression is enabled, the same compression state is reused ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-40203-imap-compression-can-reveal-whether-a-small-synced-email-body-matches-sender-chosen-text
NOTE: Fixed by: https://github.com/dovecot/core/commit/34787cb86a0147d987ab821772d310faab048ba6
@@ -37578,6 +37986,7 @@ CVE-2026-40019 (An unauthenticated attacker can send a truncated quoted argument
[bookworm] - dovecot <not-affected> (Vulnerable code not present, introduced in 2.4.3)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-40019-v2-4-3-regression-managesieve-login-pre-auth-infinite-loop
CVE-2026-40018 (None None None No publicly available exploits are known.)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-40018-mysql-multi-byte-escaping-wrong
NOTE: Fixed by: https://github.com/dovecot/core/commit/a78c015eae67a891a0c14b5434dd1f99838ae4cc
@@ -37591,6 +38000,7 @@ CVE-2026-40018 (None None None No publicly available exploits are known.)
NOTE: Fixed by: https://github.com/dovecot/core/commit/ec4cbb78314dc46e77a2abab205969d80708d5f2
NOTE: Fixed by: https://github.com/dovecot/core/commit/d3a4d4fc2d2c84403df6eea0da1c4b7bd1d887da
CVE-2026-40017 (An attacker that can send mail to a user can craft a message header wh ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-40017-imap-thread-o-m3-cpu-dos-via-crc32-hash-collision-in-strmap-mail-index-strmap-c-hash2-c
NOTE: Fixed by: https://github.com/dovecot/core/commit/d3e1c7fb5845f68d84aa04d941b8116048b06195
@@ -37606,17 +38016,20 @@ CVE-2026-40017 (An attacker that can send mail to a user can craft a message hea
NOTE: Fixed by: https://github.com/dovecot/core/commit/4d886f42e4524ed4df27042e33546512f3fe20cf
NOTE: Fixed by: https://github.com/dovecot/core/commit/8fedf386644e979f731854e53aa2e26d599776a5
CVE-2026-40015 (An attacker that has valid credentials can open many connections to th ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-40015-imap-hibernate-can-be-crashed
NOTE: Fixed by: https://github.com/dovecot/core/commit/caeee3d1d2b725963555fe63ea8200292cad1058
NOTE: Fixed by: https://github.com/dovecot/core/commit/09f7a34a6a9888d1325524ff8095d0a7793c075f
CVE-2026-40014 (An attacker that can send mail to a user can craft a message header th ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-40014-imap-thread-references-o-n2-cpu-dos-via-crafted-references-header-index-thread-links-c
NOTE: Fixed by: https://github.com/dovecot/core/commit/113eac6cbbae1bf292e7dd1826eede3f929fe6c9
NOTE: Fixed by: https://github.com/dovecot/core/commit/ad92d716328c646e4dcd4dd2aaa14bc3e422eb8d
NOTE: Fixed by: https://github.com/dovecot/core/commit/f4e7474bdb5e7557ea3d985f9f27ef8d7f91ad68
CVE-2026-40013 (An attacker that has valid credentials can submit a Sieve script conta ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-40013-pigeonhole-stack-buffer-underflow-in-pigeonhole-managesieve-checkscript-putscript
NOTE: Fixed by: https://github.com/dovecot/pigeonhole/commit/ebbf9fe427aa4f3c543abd4ef80564ff173856bc
@@ -37644,15 +38057,18 @@ CVE-2026-37236 (grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control.
[bookworm] - golang-github-grpc-ecosystem-grpc-gateway <postponed> (Limited support)
NOTE: https://github.com/grpc-ecosystem/grpc-gateway/commit/72123cd4f32545f6e1376873f412dcdcbcf29acc (v2.29.0)
CVE-2026-33607 (An attacker that has valid credentials can use IMAP LIST command to co ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-33607-dovecot-imap-list-match-sub-exponential-backtracking-%E2%80%94-cpu-denial-of-service
NOTE: Fixed by: https://github.com/dovecot/core/commit/2684624bb68ebbd440dab4d64d0b8be9ef5ea5aa
CVE-2026-33606 (Mail content stored by a user can be crafted so that it is interpreted ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-33606-dsync-mail-content-can-cause-dsync-protocol-injection
NOTE: Fixed by: https://github.com/dovecot/core/commit/bd707cab9decd4a069c9cdfd3e28d28cf9346fdd
NOTE: Fixed by: https://github.com/dovecot/core/commit/7d782e5f5e51f63483393a460594d6a8f920b6d6
CVE-2026-42394 [sieve: symlink traversal flaw could result in arbitrary file disclosure]
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1
NOTE: Fixed by: https://github.com/dovecot/core/commit/3b3e091effb83e0810ca55123bb5ebbe8ccbd7f5
NOTE: Fixed by: https://github.com/dovecot/core/commit/70473a5e603863f7e862e939f4e5daea54cd4e45
@@ -37662,11 +38078,13 @@ CVE-2026-42394 [sieve: symlink traversal flaw could result in arbitrary file dis
NOTE: Fixed by: https://github.com/dovecot/pigeonhole/commit/11599c24512eca1605f05c07f6d4ed967f5859e7
NOTE: Fixed by: https://github.com/dovecot/pigeonhole/commit/34edf6f49441be91b389050ac38943e17c12c2c8
CVE-2026-33605 (An unauthenticated attacker can crash the ManageSieve login process by ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-33605-managesieve-login-pre-auth-crash
NOTE: Fixed by: https://github.com/dovecot/pigeonhole/commit/14c28ca9c4aab11b1074c629bb744c4741434148
NOTE: Fixed by: https://github.com/dovecot/pigeonhole/commit/77bf1049ab8652b125e02ed00a15e1dd2e1feb98
CVE-2026-33604 (An attacker that can get Dovecot to relay a message, for example throu ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-33604-smtp-smuggling-via-missing-dot-stuffing-after-bare-carriage-return
NOTE: Fixed by: https://github.com/dovecot/core/commit/e94a6c3cb984f9d1e5fe51714ea5015205d79fd1
@@ -37677,6 +38095,7 @@ CVE-2026-33604 (An attacker that can get Dovecot to relay a message, for example
NOTE: Fixed by: https://github.com/dovecot/core/commit/1da3e4dc88388bb818bcb73610489249e2458353
NOTE: Fixed by: https://github.com/dovecot/core/commit/6e7860f07e11441d2a2e1c00f5f043d0a565b262
CVE-2026-33263 (When mail_max_userip_connections is set (default 10) and reached, subm ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-33263-submission-login-panic-when-mail-max-userip-connections-is-reached-panic-epoll-ctl-del-8-failed-bad-file-descriptor
NOTE: Fixed by: https://github.com/dovecot/core/commit/ff8d8059d7ba85375c6dc723fc1b7743114fbba4
@@ -37689,6 +38108,7 @@ CVE-2026-33263 (When mail_max_userip_connections is set (default 10) and reached
NOTE: Fixed by: https://github.com/dovecot/pigeonhole/commit/33f5a95c0448e0d104f2cd7591e7f42c19b33199
NOTE: Fixed by: https://github.com/dovecot/pigeonhole/commit/25e1e0adfa4ad44e3205fc8c62ca26a73cf6ee41
CVE-2026-27852 (An attacker that can send mail to a user can craft a message whose hea ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE: https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-27852-dos-by-sending-mail-with-bad-header
NOTE: Fixed by: https://github.com/dovecot/core/commit/035fbfa155288ac037965e0e4700eb198ccbf39a (2.4.3)
@@ -46573,7 +46993,7 @@ CVE-2026-66649 (Unauthenticated SQL Injection in Directory Pro <= 2.5.8 versions
NOT-FOR-US: WordPress plugin or theme
CVE-2026-66647 (Subscriber Broken Access Control in Homlisti <= 3.1.2 versions.)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-66616 (Unauthenticated Cross Site Scripting (XSS) in Form Maker by 10Web <= 1 ...)
+CVE-2026-66616 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-66615 (Unauthenticated Cross Site Scripting (XSS) in Podlove Podcast Publishe ...)
NOT-FOR-US: WordPress plugin or theme
@@ -52202,6 +52622,7 @@ CVE-2026-65832 (Deskflow is a keyboard and mouse sharing app. Prior to continuou
CVE-2026-65822 (ERPNext is a free and open source Enterprise Resource Planning tool. P ...)
NOT-FOR-US: ERPNext
CVE-2026-65640 (WordPress is vulnerable to a remote code execution vulnerability via m ...)
+ {DSA-6525-1}
- wordpress 7.1+dfsg1-1 (bug #1144955)
NOTE: https://wordpress.org/news/2026/08/wordpress-7-0-4-release/
NOTE: https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-8vr3-7mxf-gx8w
@@ -63324,7 +63745,7 @@ CVE-2026-71193 (In OpenStack Designate before 22.0.1, zone creation checks (_is_
NOTE: https://bugs.launchpad.net/designate/+bug/2160533
NOTE: https://security.openstack.org/ossa/OSSA-2026-034.html
CVE-2026-90616 (In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitra ...)
- {DSA-6432-1}
+ {DSA-6524-1 DSA-6432-1}
- flatpak 1.18.1-1 (bug #1144130)
NOTE: https://github.com/flatpak/flatpak/security/advisories/GHSA-8688-9x26-hhxj
NOTE: Fixed by: https://github.com/flatpak/flatpak/commit/478072972056d2d15c768c246f80abdf83cf0e5e (1.18.1)
@@ -63384,7 +63805,7 @@ CVE-2026-96279 (A malicious OCI registry can hardlink arbitrary host files into
NOTE: https://github.com/flatpak/flatpak/security/advisories/GHSA-9rww-v4mm-x4jg
NOTE: Fixed by: https://github.com/flatpak/flatpak/commit/e6fa2f9b416ec382644694c8737dc8fbe7f07b89 (1.18.1)
CVE-2026-92162 [GHSA-v2gw-v9h5-9q4x]
- {DSA-6432-1}
+ {DSA-6524-1 DSA-6432-1}
- flatpak 1.18.1-1 (bug #1144130)
NOTE: https://github.com/flatpak/flatpak/security/advisories/GHSA-v2gw-v9h5-9q4x
NOTE: Fixed by: https://github.com/flatpak/flatpak/commit/19456b916842b079af833a86b9ab89c5db154b92 (1.18.1)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a81a53fffaba7424ada3c83e305416b37fe51e25
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a81a53fffaba7424ada3c83e305416b37fe51e25
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260928/5b8719cd/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list