[Git][security-tracker-team/security-tracker][master] Add one new rpm issue

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9928002c by Salvatore Bonaccorso at 2026-09-30T23:05:22+02:00
Add one new rpm issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -714,7 +714,8 @@ CVE-2026-103270 (LightLLM through 1.2.0 mounts reinforcement learning control ro
 CVE-2026-103243 (LightLLM through 1.2.0 fails to validate image_url and audio_url param ...)
 	NOT-FOR-US: LightLLM
 CVE-2026-103242 (A heap-based buffer overflow flaw was found in rpm. RPMTAG_FILESIGNATU ...)
-	TODO: check
+	- rpm <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2543866
 CVE-2026-103241 (A flaw has been found in vllm-project vLLM up to 0.26.0. This vulnerab ...)
 	TODO: check
 CVE-2026-103239 (MISP contains a privilege escalation vulnerability in the tag collecti ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9928002cf60c1fcd0153ec3d2ffe1f2d14454bc3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9928002cf60c1fcd0153ec3d2ffe1f2d14454bc3
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260930/9de2537e/attachment.htm>