[Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Sep 29 08:13:36 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
ec05bd73 by security tracker role at 2026-09-29T07:13:25+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,227 @@
+CVE-2026-97685 (An authenticated LimeSurvey Community Edition 7.3.0 user allowed to cr ...)
+ TODO: check
+CVE-2026-96760 (Authlib (v1.7.2 and below) contains a signature verification bypass vu ...)
+ TODO: check
+CVE-2026-96326 (The HT Contact Form \u2013 Drag & Drop Form Builder for WordPress plug ...)
+ TODO: check
+CVE-2026-93355 (LiteLLM contains a weak authentication vulnerability that allows an at ...)
+ TODO: check
+CVE-2026-91096 (In proxygen from v2024.10.28.00 until v2026.09.28.00, WebTransportImpl ...)
+ TODO: check
+CVE-2026-91095 (In proxygen from v2024.10.28.00 until v2026.09.28.00, the HTTPTransact ...)
+ TODO: check
+CVE-2026-87741 (The ConvertPlus plugin for WordPress is vulnerable to Deserialization ...)
+ TODO: check
+CVE-2026-86950 (An out-of-bounds write issue was addressed with improved bounds checki ...)
+ TODO: check
+CVE-2026-86158 (Missing authentication in the local .NET backend (Fiddler.WebUi) of Pr ...)
+ TODO: check
+CVE-2026-86157 (Exposure of privileged IPC functionality in Progress Telerik Fiddler E ...)
+ TODO: check
+CVE-2026-84895 (In proxygen from v2026.04.06.00 until v2026.09.28.00, QuicWtSession::c ...)
+ TODO: check
+CVE-2026-18747 (The MCUmgr SMP-over-console transport decodes a base64 frame, reads a ...)
+ TODO: check
+CVE-2026-18746 (parse_write_op() in subsys/net/lib/lwm2m/lwm2m_message_handling.c hand ...)
+ TODO: check
+CVE-2026-18417 (The native BSD-socket layer recorded a pending asynchronous socket err ...)
+ TODO: check
+CVE-2026-18416 (The CoAP link-format helper match_path_uri() in subsys/net/lib/coap/co ...)
+ TODO: check
+CVE-2026-18415 (ieee802154_send() in subsys/net/l2/ieee802154/ieee802154.c copies the ...)
+ TODO: check
+CVE-2026-18414 (The ADC API requires each driver to reject a sampling sequence whose d ...)
+ TODO: check
+CVE-2026-18413 (The ADC API requires each driver to reject a sampling sequence whose d ...)
+ TODO: check
+CVE-2026-16513 (The userspace verifier z_vrfy_rtio_sqe_copy_in_get_handles() in subsys ...)
+ TODO: check
+CVE-2026-102422 (shell-quote's `quote()` function emits a `{ comment }` token as `#` fo ...)
+ TODO: check
+CVE-2026-102414 (pbkdf2 through 3.1.6 re-hashes passwords longer than the digest's bloc ...)
+ TODO: check
+CVE-2026-102374 (GestSup versions before 3.2.62 contain a stored cross-site scripting v ...)
+ TODO: check
+CVE-2026-102373 (GestSup versions before 3.2.62 fail to validate ticket ownership when ...)
+ TODO: check
+CVE-2026-102372 (GestSup versions before 3.2.62 fail to properly sanitize HTML email bo ...)
+ TODO: check
+CVE-2026-102367 (mall4j through 4.0 contains an insufficient session expiration vulnera ...)
+ TODO: check
+CVE-2026-102366 (mall4j through 4.0 contains an unrestricted file upload vulnerability ...)
+ TODO: check
+CVE-2026-102365 (mall4j through 4.0 fails to enforce authorization checks on GET endpoi ...)
+ TODO: check
+CVE-2026-102364 (mall4j through 4.0 fails to validate the sysType field in sa-token ses ...)
+ TODO: check
+CVE-2026-102363 (mall4j through 4.0 contains a missing authentication vulnerability in ...)
+ TODO: check
+CVE-2026-102362 (mall4j through 4.0 fails to implement authentication controls on the D ...)
+ TODO: check
+CVE-2026-102361 (mall4j through 4.0 contains a missing authentication vulnerability in ...)
+ TODO: check
+CVE-2026-102335 (Nginx Proxy Manager through 2.16.0 fails to restrict the advanced_conf ...)
+ TODO: check
+CVE-2026-102334 (Nginx Proxy Manager through 2.16.0 lacks rate-limiting on authenticati ...)
+ TODO: check
+CVE-2026-102333 (httpdbg before 2.2.1 fails to validate URL schemes in recorded HTTP re ...)
+ TODO: check
+CVE-2026-102332 (Dozzle versions before 11.1.2 fail to sanitize container display names ...)
+ TODO: check
+CVE-2026-102297 (ZoneMinder before 1.38.4 fails to apply per-monitor access restriction ...)
+ TODO: check
+CVE-2026-102296 (ZoneMinder before 1.38.4 contains static buffer overflow vulnerabiliti ...)
+ TODO: check
+CVE-2026-102293 (A vulnerability was identified in realjerrytang tacomall 1.0.0. Impact ...)
+ TODO: check
+CVE-2026-102292 (A flaw has been found in coolbeans1212 MateisHomePage-Website up to ea ...)
+ TODO: check
+CVE-2026-102290 (A vulnerability was determined in CodeCanyon Rocket LMS up to 2.2. Thi ...)
+ TODO: check
+CVE-2026-102281 (Nest is a framework for building scalable Node.js server-side applicat ...)
+ TODO: check
+CVE-2026-102279 (Laravel is a web application framework. Prior to 12.69.0 and 13.30.0, ...)
+ TODO: check
+CVE-2026-102278 (The brace-expansion library generates arbitrary strings containing a c ...)
+ TODO: check
+CVE-2026-102277 (The brace-expansion library generates arbitrary strings containing a c ...)
+ TODO: check
+CVE-2026-102276 (The brace-expansion library generates arbitrary strings containing a c ...)
+ TODO: check
+CVE-2026-102275 (PyJWT is a Python implementation of JSON Web Token standards. From 2.1 ...)
+ TODO: check
+CVE-2026-102274 (PyJWT is a Python implementation of JSON Web Token standards. From 2.9 ...)
+ TODO: check
+CVE-2026-102273 (PyJWT is a Python implementation of JSON Web Token standards. From 2.1 ...)
+ TODO: check
+CVE-2026-102272 (PyJWT is a Python implementation of JSON Web Token standards. From 2.1 ...)
+ TODO: check
+CVE-2026-102271 (PyJWT is a Python implementation of JSON Web Token standards. From 2.4 ...)
+ TODO: check
+CVE-2026-102270 (PyJWT is a Python implementation of JSON Web Token standards. Prior to ...)
+ TODO: check
+CVE-2026-102269 (PyJWT is a Python implementation of JSON Web Token standards. Prior to ...)
+ TODO: check
+CVE-2026-102268 (PyJWT is a Python implementation of JSON Web Token standards. Prior to ...)
+ TODO: check
+CVE-2026-102267 (PyJWT is a Python implementation of JSON Web Token standards. Prior to ...)
+ TODO: check
+CVE-2026-102266 (PyJWT is a Python implementation of JSON Web Token standards. From 2.1 ...)
+ TODO: check
+CVE-2026-102265 (PyJWT is a Python implementation of JSON Web Token standards. From 2.1 ...)
+ TODO: check
+CVE-2026-102264 (A vulnerability was found in mwasikz robo-cafe-rms up to 228c44a02823f ...)
+ TODO: check
+CVE-2026-102263 (A vulnerability has been found in mwasikz robo-cafe-rms up to 228c44a0 ...)
+ TODO: check
+CVE-2026-102261 (A flaw has been found in owen2345 Camaleon CMS up to 2.9.2. Impacted i ...)
+ TODO: check
+CVE-2026-102249 (A security flaw has been discovered in REBUILD up to 4.4.11. This vuln ...)
+ TODO: check
+CVE-2026-102248 (A vulnerability was identified in Rebuild up to 4.4.7/4.5.0-beta5. Thi ...)
+ TODO: check
+CVE-2026-102247 (A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6.5.2026060 ...)
+ TODO: check
+CVE-2026-102245 (A weakness has been identified in MODSetter SurfSense up to 2.0.3. The ...)
+ TODO: check
+CVE-2026-102244 (A security flaw has been discovered in MODSetter SurfSense up to 0.0.3 ...)
+ TODO: check
+CVE-2026-102243 (A vulnerability was identified in MODSetter SurfSense up to 2.0.3. Thi ...)
+ TODO: check
+CVE-2026-102241 (A vulnerability was determined in Netcore NAP930 0.1.241010.141410. Th ...)
+ TODO: check
+CVE-2026-102240 (A vulnerability was found in Netcore NAP930 0.1.241010.141410. This af ...)
+ TODO: check
+CVE-2026-102006 (In Wind River VxWorks 7 prior to 26.09, specific system call arguments ...)
+ TODO: check
+CVE-2026-102005 (Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under s ...)
+ TODO: check
+CVE-2026-102004 (Wind River VxWorks 7 prior to 26.09, specific system call arguments ca ...)
+ TODO: check
+CVE-2026-101918 (PyJWT is a Python implementation of JSON Web Token standards. From 2.0 ...)
+ TODO: check
+CVE-2026-101917 (PyJWT is a Python implementation of JSON Web Token standards. Prior to ...)
+ TODO: check
+CVE-2026-101916 (@grpc/grpc-js implements the core functionality of gRPC purely in Java ...)
+ TODO: check
+CVE-2026-101915 (@grpc/grpc-js implements the core functionality of gRPC purely in Java ...)
+ TODO: check
+CVE-2026-101914 (@grpc/grpc-js implements the core functionality of gRPC purely in Java ...)
+ TODO: check
+CVE-2026-101878 (Bitwarden Server 2025.6.0 before 2026.5.0 declares the @ExternalId par ...)
+ TODO: check
+CVE-2026-101860 (A vulnerability was found in RaspAP raspap-webgui up to 3.5.5. Affecte ...)
+ TODO: check
+CVE-2026-101859 (A vulnerability has been found in RaspAP raspap-webgui up to 3.5.5. Af ...)
+ TODO: check
+CVE-2026-101858 (A flaw has been found in RaspAP raspap-webgui up to 3.5.5. Affected is ...)
+ TODO: check
+CVE-2026-101354 (A security flaw has been discovered in FAST FAC1203R 20200116_2.0.4. T ...)
+ TODO: check
+CVE-2026-101281 (A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. ...)
+ TODO: check
+CVE-2026-101280 (A vulnerability was detected in Trusted Domain Project OpenDMARC up to ...)
+ TODO: check
+CVE-2026-101279 (A security vulnerability has been detected in Trusted Domain Project O ...)
+ TODO: check
+CVE-2026-101278 (A weakness has been identified in Trusted Domain Project OpenDMARC up ...)
+ TODO: check
+CVE-2026-101277 (A security flaw has been discovered in Trusted Domain Project OpenDKIM ...)
+ TODO: check
+CVE-2026-101265 (A vulnerability was identified in Intelbras TIP 125i 4.3.35/4.3.41. Th ...)
+ TODO: check
+CVE-2026-101264 (A vulnerability was determined in Ziroom ZHOME A0101 1.0.1.0. Impacted ...)
+ TODO: check
+CVE-2026-101263 (A vulnerability was found in Ziroom ZHOME A0101 1.0.1.0. This issue af ...)
+ TODO: check
+CVE-2026-101262 (A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This vul ...)
+ TODO: check
+CVE-2026-101261 (A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This affects an u ...)
+ TODO: check
+CVE-2026-101260 (A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. Affected b ...)
+ TODO: check
+CVE-2026-101205 (A vulnerability was determined in FastStone Image Viewer up to 8.3. Th ...)
+ TODO: check
+CVE-2026-101204 (A vulnerability was found in FastStone Image Viewer up to 8.3. This af ...)
+ TODO: check
+CVE-2026-101203 (A vulnerability has been found in FastStone Image Viewer up to 8.3. Th ...)
+ TODO: check
+CVE-2026-101202 (A flaw has been found in FastStone Image Viewer up to 8.3. The affecte ...)
+ TODO: check
+CVE-2026-101188 (A security vulnerability has been detected in Netcore POWER13 2.0.2407 ...)
+ TODO: check
+CVE-2026-101187 (A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vul ...)
+ TODO: check
+CVE-2026-101146 (A security flaw has been discovered in Eleveo Quality Management 9.7.0 ...)
+ TODO: check
+CVE-2026-101145 (A vulnerability was identified in Eleveo Call Recording Software 9.7.0 ...)
+ TODO: check
+CVE-2026-101144 (A vulnerability was determined in Eleveo Call Recording Software 9.7.0 ...)
+ TODO: check
+CVE-2026-101143 (A vulnerability was found in Eleveo Quality Management 9.7.0. Affected ...)
+ TODO: check
+CVE-2026-101142 (A vulnerability has been found in Eleveo Quality Management 9.7.0. Aff ...)
+ TODO: check
+CVE-2026-101141 (A flaw has been found in Eleveo Call Recording Software 9.7.0. Affecte ...)
+ TODO: check
+CVE-2026-101139 (A vulnerability was detected in Webkul Bagisto up to 2.4.6. This impac ...)
+ TODO: check
+CVE-2026-101093 (Cotonti through 1.0.0 contains a cross-site request forgery vulnerabil ...)
+ TODO: check
+CVE-2026-101092 (SiYuan before v3.8.4 fails to enforce publish-access checks in the get ...)
+ TODO: check
+CVE-2026-101091 (SiYuan versions before v3.8.4 fail to properly validate SQL statements ...)
+ TODO: check
+CVE-2026-100392 (InvoicePlane is a self-hosted open source application for managing inv ...)
+ TODO: check
+CVE-2026-100371 (InvoicePlane is a self-hosted open source application for managing inv ...)
+ TODO: check
+CVE-2026-100370 (DOMSanitizer is a DOM/SVG/MathML Sanitizer for PHP 7.3+. Prior to vers ...)
+ TODO: check
+CVE-2024-58386 (ZoneMinder versions 1.37.0 before 1.38.0 contain a path traversal vuln ...)
+ TODO: check
+CVE-2024-42002 (A code injection vulnerability has been discovered in the Robot Operat ...)
+ TODO: check
CVE-2026-96415
- wireshark <unfixed>
NOTE: https://www.wireshark.org/security/wnpa-sec-2026-110
@@ -305,6 +529,7 @@ CVE-2026-15953 (Improper Limitation of a Pathname to a Restricted Directory ('Pa
CVE-2026-15952 (Incorrect Permission Assignment for Critical Resource vulnerability in ...)
NOT-FOR-US: ABB group
CVE-2026-13018 (Insufficient validation of untrusted input in Codecs in Google Chrome ...)
+ {DSA-6205-1}
- chromium 147.0.7727.55-1
CVE-2026-12342 (This vulnerability impacts all versions of IdentityIQ and allows an un ...)
NOT-FOR-US: IdentityIQ
@@ -528,7 +753,7 @@ CVE-2026-91012
- apache-karaf <itp> (bug #881297)
CVE-2026-91048
- apache-karaf <itp> (bug #881297)
-CVE-2026-97024
+CVE-2026-97024 (A path traversal vulnerability in Flatpak's handling of the files/etc ...)
{DSA-6524-1}
- flatpak 1.18.4-1
NOTE: https://github.com/flatpak/flatpak/security/advisories/GHSA-8xgq-v545-vgvf
@@ -536,19 +761,19 @@ CVE-2026-97023 (A path traversal vulnerability in Flatpak's handling of the expo
{DSA-6524-1}
- flatpak 1.18.4-1
NOTE: https://github.com/flatpak/flatpak/security/advisories/GHSA-5p67-xh8x-rq54
-CVE-2026-97025
+CVE-2026-97025 (Flatpak writes the OCI repository authentication token with world-read ...)
{DSA-6524-1}
- flatpak 1.18.4-1
NOTE: https://github.com/flatpak/flatpak/security/advisories/GHSA-7rvf-rqr3-43j4
-CVE-2026-97026
+CVE-2026-97026 (Flatpak creates temporary child repository directories under the user ...)
{DSA-6524-1}
- flatpak 1.18.4-1
NOTE: https://github.com/flatpak/flatpak/security/advisories/GHSA-r9w3-qx54-qvc8
-CVE-2026-97027
+CVE-2026-97027 (Flatpak passes through arbitrary vendor-extension keys unmodified when ...)
{DSA-6524-1}
- flatpak 1.18.4-1
NOTE: https://github.com/flatpak/flatpak/security/advisories/GHSA-v64f-hrwr-j4vh
-CVE-2026-97029
+CVE-2026-97029 (Flatpak's process ID namespace separation does not prevent a sandboxed ...)
{DSA-6524-1}
- flatpak 1.18.4-1
NOTE: https://github.com/flatpak/flatpak/security/advisories/GHSA-f3p8-vr7v-gxf2
@@ -1273,16 +1498,20 @@ CVE-2026-100660 (Netty's HTTP/3 codec (io.netty:netty-codec-http3) from 4.2.0.Fi
CVE-2026-100659 (Netty's HTTP/3 codec (io.netty:netty-codec-http3) in versions 4.2.0.Fi ...)
- netty <not-affected> (Vulnerable code not present)
NOTE: https://github.com/netty/netty/security/advisories/GHSA-q9pg-8h3j-8hvm
-CVE-2026-100658 (Netty (io.netty:netty-codec-http) contains an unbounded per-connection ...)
+CVE-2026-100658
+ REJECTED
- netty <not-affected> (Vulnerable code not present)
NOTE: https://github.com/netty/netty/security/advisories/GHSA-2g37-3h88-55hc
-CVE-2026-100657 (Netty's STOMP codec (io.netty:netty-codec-stomp) contains a ByteBuf le ...)
+CVE-2026-100657
+ REJECTED
- netty <unfixed>
NOTE: https://github.com/netty/netty/security/advisories/GHSA-ghg5-c4jg-8q5j
-CVE-2026-100656 (Netty (io.netty:netty-codec-http) contains an unbounded per-connection ...)
+CVE-2026-100656
+ REJECTED
- netty <unfixed>
NOTE: https://github.com/netty/netty/security/advisories/GHSA-pvjx-v7vp-62vq
-CVE-2026-100655 (Netty (io.netty:netty-codec-http) versions up to and including 4.1.137 ...)
+CVE-2026-100655
+ REJECTED
- netty <unfixed>
NOTE: https://github.com/netty/netty/security/advisories/GHSA-rmcw-9fcq-wjq7
CVE-2026-100654 (vLLM before 0.29.0 accepts user-controlled stop_token_ids on the OpenA ...)
@@ -1680,7 +1909,7 @@ CVE-2026-100521 (Cotonti through 1.0.0 contains a reflected cross-site scripting
NOT-FOR-US: Cotonti CMS
CVE-2026-100520 (Laranode versions before 1.2.1 contain a path traversal vulnerability ...)
NOT-FOR-US: Laranode
-CVE-2026-100505 (Ghidra versions 11.2 through 12.1.4 contain a heap out-of-bounds read ...)
+CVE-2026-100505 (Ghidra versions 9.2 through 12.1.4 contain a heap out-of-bounds read v ...)
- ghidra <itp> (bug #923851)
CVE-2026-100504 (Ghidra versions through 12.1.4 contain a stack-based out-of-bounds wri ...)
- ghidra <itp> (bug #923851)
@@ -3828,12 +4057,14 @@ CVE-2026-XXXX [GHSA-443p-7392-h4v2]
- incus 7.0.1-5
[trixie] - incus <not-affected> (Vulnerable code not present, only affects 7.x)
NOTE: https://github.com/lxc/incus/security/advisories/GHSA-443p-7392-h4v2
-CVE-2026-85526 [GHSA-h85r-gjgx-g2rv]
+CVE-2026-85526 (Path traversal in the Btrfs storage driver (unpackVolume) in Canonical ...)
+ {DSA-6027-1}
- incus 7.0.1-5
- lxd <removed>
[bookworm] - lxd <end-of-life> (EOL in bookworm LTS)
NOTE: https://github.com/canonical/lxd/security/advisories/GHSA-h85r-gjgx-g2rv
-CVE-2026-85185 [GHSA-27q7-qwhm-c34p]
+CVE-2026-85185 (Path traversal in the btrfs storage driver in Canonical LXD versions 4 ...)
+ {DSA-6027-1}
- incus 7.0.1-5
- lxd <removed>
[bookworm] - lxd <end-of-life> (EOL in bookworm LTS)
@@ -4428,10 +4659,12 @@ CVE-2026-97404 (In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the
[trixie] - zaqar <no-dsa> (Minor issue)
NOTE: https://security.openstack.org/ossa/OSSA-2026-042.html
CVE-2026-88816 (DBI versions before 1.654 for Perl incorrectly treat numeric values as ...)
+ {DLA-4798-1}
- libdbi-perl 1.654-1 (bug #1149042)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/43915934/
NOTE: Fixed by: https://github.com/perl5-dbi/dbi/commit/70962570212dc60a5428098cf2a0462ad5945851 (1.654)
CVE-2026-88815 (DBI versions before 1.654 for Perl incorrectly treat numeric values as ...)
+ {DLA-4798-1}
- libdbi-perl 1.654-1 (bug #1149042)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/43915930/
NOTE: Fixed by: https://github.com/perl5-dbi/dbi/commit/e5ad87e5602da995d28b4d65df222368b58d6702 (1.654)
@@ -5273,7 +5506,7 @@ CVE-2026-97152 (Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotel
CVE-2026-97151 (mammoth (aka mammoth.js) before 1.12.2 is vulnerable to prototype poll ...)
NOT-FOR-US: mammoth (aka mammoth.js) Node.js module
CVE-2026-97149 (In OpenStack Swift before 2.38.2, the tempurl middleware does not reje ...)
- {DSA-6519-1}
+ {DSA-6519-1 DLA-4801-1}
- swift 2.38.1-3 (bug #1148834)
NOTE: https://launchpad.net/bugs/2166876
NOTE: https://security.openstack.org/ossa/OSSA-2026-041.html
@@ -23344,6 +23577,7 @@ CVE-2026-80926 (In the Linux kernel, the following vulnerability has been resolv
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/0e753899627b5e28a9fea8bca98262a6f65a2452 (7.3-rc2)
CVE-2026-78030 (DBI versions before 1.653 for Perl load arbitrary modules via unvalida ...)
+ {DLA-4798-1}
- libdbi-perl 1.653-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/43677746/
NOTE: https://github.com/perl5-dbi/dbi/security/advisories/GHSA-wqmw-wqwx-3fr7
@@ -32769,14 +33003,17 @@ CVE-2026-78043 (The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.
CVE-2026-81738 (OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver a ...)
- openvpn <not-affected> (Only affects OpenVPN on Windows)
CVE-2026-71198 (In OpenStack Glance before 32.0.1, the location API does not validate ...)
+ {DLA-4800-1}
- glance 2:32.0.0-4 (bug #1146594)
[trixie] - glance <no-dsa> (Minor issue)
NOTE: https://security.openstack.org/ossa/OSSA-2026-038.html
CVE-2026-71197
+ {DLA-4800-1}
- glance 2:32.0.0-4 (bug #1146594)
[trixie] - glance <no-dsa> (Minor issue)
NOTE: https://security.openstack.org/ossa/OSSA-2026-038.html
CVE-2026-71196
+ {DLA-4800-1}
- glance 2:32.0.0-4 (bug #1146594)
[trixie] - glance <no-dsa> (Minor issue)
NOTE: https://security.openstack.org/ossa/OSSA-2026-038.html
@@ -47353,6 +47590,7 @@ CVE-2026-53424 (Authentication Bypass by Capture-replay vulnerability in dropbox
CVE-2026-49996 (SecureDrop Client is a desktop app for journalists to securely communi ...)
NOT-FOR-US: SecureDrop Client
CVE-2026-49825 (lxml is a library for processing XML and HTML in the Python language. ...)
+ {DLA-4799-1}
- lxml 6.1.3-1
[trixie] - lxml <no-dsa> (Minor issue)
- lxml-html-clean 0.4.5-1
@@ -60962,102 +61200,135 @@ CVE-2025-9486 (GitLab has remediated an issue in GitLab EE affecting all version
CVE-2024-27253 (IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an auth ...)
NOT-FOR-US: IBM
CVE-2026-53802 (rsync before 3.5.0 contains an arbitrary file read vulnerability that ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-53803 (rsync before 3.5.0 contains a symlink following vulnerability that all ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-53785 (rsyncbefore 3.5.0contains a path traversal vulnerability that allows a ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-53784 (rsync before 3.5.0contains a path traversal vulnerability that allows ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-53793 (rsync before 3.5.0contains a path confinement bypass vulnerability tha ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-53795 (rsync before 3.5.0contains an arbitrary file write vulnerability that ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-53796 (rsync before 3.5.0contains a time-of-check to time-of-use (TOCTOU) rac ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-53797 (rsync before 3.5.0contains a symlink race condition vulnerability in t ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-53799 (rsync before 3.5.0contains a symlink race condition vulnerability that ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-53800 (rsync before 3.5.0contains a symlink race condition vulnerability in t ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-53801 (rsync before 3.5.0contains a symlink race condition vulnerability in t ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-53783 (rsync before3.5.0 contains a time-of-check to time-of-use (TOCTOU) rac ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-53786 (rsyncbefore 3.5.0contains a filter rule bypass vulnerability that allo ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-53798 (rsync before 3.5.0contains a privilege confusion vulnerability in the ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-53788 (rsync before 3.5.0contains a newline injection vulnerability in the na ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-53789 (rsync before 3.5.0contains an improper path handling vulnerability tha ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-53791 (rsync daemon before 3.5.0contains an IP address spoofing vulnerability ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-53790 (rsync before 3.5.0contains multiple command and argument injection vul ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-53792 (rsyncbefore 3.5.0contains an out-of-bounds read vulnerability in the s ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-53794 (rsync before 3.5.0contains a logic error in --max-alloc handling that ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-70461 (rsync 3.2.5 before 3.5.0contains a heap out-of-bounds write vulnerabil ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-70458 (rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-70456 (rsync 3.0.1 before 3.5.0contains an out-of-bounds write vulnerability ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-70457 (rsync 3.2.3before 3.5.0contains an out-of-bounds write in parse_size_a ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-70459 (rsync 3.0.0 before 3.5.0contains a null pointer dereference vulnerabil ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-70464 (rsync daemon 2.0.0 before 3.5.0contains a denial of service vulnerabil ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-70455 (rsync 3.4.2 before 3.5.0contains a denial of service vulnerability tha ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-70453 (rsync before 3.5.0contains an algorithmic complexity vulnerability in ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-70452 (rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerabili ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-70463 (rsync 3.1.0 before 3.5.0contains an authorization bypass in auth users ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-70460 (rsync 2.3.3 before 3.5.0contains a path traversal vulnerability that a ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-70462 (rsync 3.1.0 before 3.5.0contains a signed integer overflow vulnerabili ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-70454 (rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 ( ...)
+ {DSA-6527-1}
- rsync 3.5.0+ds1-1
NOTE: https://download.samba.org/pub/rsync/NEWS#3.5.0
CVE-2026-17431 (PDF::WebKit versions through 1.2 for Perl allow OS command injection v ...)
@@ -61488,6 +61759,7 @@ CVE-2026-XXXX [OSSN-0106: API ramdisk endpoints require network-level access con
NOTE: https://bugs.launchpad.net/ironic/+bug/2162821
NOTE: https://bugs.launchpad.net/ironic/+bug/2162818
CVE-2026-77648 (In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=imp ...)
+ {DLA-4800-1}
- glance 2:32.0.0-3 (bug #1144212)
[trixie] - glance <no-dsa> (Minor issue)
NOTE: https://wiki.openstack.org/wiki/OSSN/OSSN-0105
@@ -73395,7 +73667,7 @@ CVE-2026-71192 (In OpenStack Swift through 2.38.0, the S3API middleware does not
NOTE: https://security.openstack.org/ossa/OSSA-2026-030.html
NOTE: https://bugs.launchpad.net/swift/+bug/2158733
CVE-2026-71191 (In OpenStack Swift through 2.38.0, S3API middleware does not enforce t ...)
- {DSA-6449-1}
+ {DSA-6449-1 DLA-4801-1}
- swift 2.37.1-6 (bug #1142972)
NOTE: https://security.openstack.org/ossa/OSSA-2026-030.html
NOTE: https://bugs.launchpad.net/swift/+bug/2158733
@@ -148575,6 +148847,7 @@ CVE-2026-41079 (OpenPrinting CUPS is an open source printing system for Linux an
CVE-2026-41067 (Astro is a web framework. Prior to 6.1.6, the defineScriptVars functio ...)
NOT-FOR-US: Astro web framework
CVE-2026-41066 (lxml is a library for processing XML and HTML in the Python language. ...)
+ {DLA-4799-1}
- lxml 6.1.0-1
[trixie] - lxml <no-dsa> (Minor issue)
NOTE: https://github.com/lxml/lxml/security/advisories/GHSA-vfmq-68hx-4jfw
@@ -176772,6 +177045,7 @@ CVE-2026-28542 (Permission bypass vulnerability in the system service framework.
CVE-2026-28353 (Trivy Vulnerability Scanner is a VS Code extension that helps find vul ...)
- trivy <itp> (bug #929458)
CVE-2026-28350 (lxml_html_clean is a project for HTML cleaning functionalities copied ...)
+ {DLA-4799-1}
- lxml 5.2.0-1
- lxml-html-clean 0.4.4-1
[trixie] - lxml-html-clean 0.4.4-1~deb13u1
@@ -176779,6 +177053,7 @@ CVE-2026-28350 (lxml_html_clean is a project for HTML cleaning functionalities c
NOTE: Fixed by: https://github.com/fedora-python/lxml_html_clean/commit/9c5612ca33b941eec4178abf8a5294b103403f34 (0.4.4)
NOTE: lxml-html-clean was split out of lxml in 5.2.0
CVE-2026-28348 (lxml_html_clean is a project for HTML cleaning functionalities copied ...)
+ {DLA-4799-1}
- lxml 5.2.0-1
- lxml-html-clean 0.4.4-1
[trixie] - lxml-html-clean 0.4.4-1~deb13u1
@@ -212834,7 +213109,7 @@ CVE-2024-58307 (CSZCMS 1.3.0 contains an authenticated SQL injection vulnerabili
NOT-FOR-US: CSZCMS
CVE-2024-58306 (minaliC 2.0.0 contains a denial of service vulnerability that allows r ...)
NOT-FOR-US: MinaliC
-CVE-2024-58304 (SPA-CART CMS 1.9.0.3 contains a stored cross-site scripting vulnerabil ...)
+CVE-2024-58304 (SPA-CART CMS before 2.0.0 contains a stored cross-site scripting vulne ...)
NOT-FOR-US: SPA-CART CMS
CVE-2024-58303 (FoF Pretty Mail 1.1.2 contains a server-side template injection vulner ...)
NOT-FOR-US: FoF Pretty Mail
@@ -541887,7 +542162,7 @@ CVE-2022-2026 (Cross-site Scripting (XSS) - Stored in GitHub repository kromitgm
NOT-FOR-US: kromitgmbh/titra
CVE-2022-2025 (an attacker with knowledge of user/pass of Grandstream GSD3710 in its ...)
NOT-FOR-US: Grandstream
-CVE-2017-20051 (A vulnerability was found in InnoSetup Installer. It has been declared ...)
+CVE-2017-20051 (A vulnerability was detected in InnoSetup Installer 5.5.9. This affect ...)
NOT-FOR-US: InnoSetup
CVE-2022-32548 (An issue was discovered on certain DrayTek Vigor routers before July 2 ...)
NOT-FOR-US: DrayTek Vigor router
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ec05bd733e45b9c32d5192ffab91d46dbcc0e4c6
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ec05bd733e45b9c32d5192ffab91d46dbcc0e4c6
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260929/a047e3e4/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list