[Git][security-tracker-team/security-tracker][master] Add commit references for two more qemu issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Sep 29 19:54:58 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
94b2c1a4 by Salvatore Bonaccorso at 2026-09-29T20:54:31+02:00
Add commit references for two more qemu issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2631,6 +2631,8 @@ CVE-2026-93834 (A use-after-free vulnerability was found in QEMU's 9pfs subsyste
 	NOTE: https://gitlab.com/qemu-project/qemu/-/work_items/4491
 	NOTE: Introduced with: https://gitlab.com/qemu-project/qemu/-/commit/02cb7f3a256517cbf3136caff2863fbafc57b540 (v1.0-rc0)
 	NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/fe9e30899ffceef25cf345ec83f76546afca19dd (master)
+	NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/abae50de244a51ae4e959274e2ef6cbf373464ff (v11.1.2)
+	NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/d27cd8d5a1c6ef5a506cd89cdda5c809f63e3eab (v10.0.14)
 CVE-2026-93747 (The wpForo Forum plugin for WordPress is vulnerable to Stored Cross-Si ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-93656 (The User Profile Builder \u2013 Beautiful User Registration Forms, Use ...)
@@ -86452,6 +86454,8 @@ CVE-2026-12080 (A flaw was found in the QEMU Guest Agent (qga). A local unprivil
 	- qemu 1:11.1.2+ds-1
 	[trixie] - qemu <no-dsa> (Minor issue)
 	NOTE: https://gitlab.com/qemu-project/qemu/-/work_items/3929
+	NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/de05f5d842c52120f736bb6a5b0d169ae5136f56 (v11.1.2)
+	NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/332ab334bc6b0b43bc17c90820fec068b63a666b (v10.0.14)
 CVE-2026-64207 (In the Linux kernel, the following vulnerability has been resolved:  n ...)
 	- linux 7.1.4-1
 	[trixie] - linux <not-affected> (Vulnerable code not present)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/94b2c1a49a954d356f621ca95230e7dd5095293a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/94b2c1a49a954d356f621ca95230e7dd5095293a
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260929/557837ce/attachment.htm>


More information about the debian-security-tracker-commits mailing list