Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
dee4006b by Salvatore Bonaccorso at 2026-01-16T06:05:09+01:00
Add introducing commit for CVE-2026-22797/keystonemiddleware
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -250,6 +250,7 @@ CVE-2026-22797 [Privilege Escalation via Identity Headers
in External OAuth2 Tok
[bullseye] - python-keystonemiddleware <not-affected> (Vulnerable code
not present)
NOTE: https://www.openwall.com/lists/oss-security/2026/01/15/1
NOTE: https://bugs.launchpad.net/keystonemiddleware/+bug/2129018
+ NOTE: Introduced with:
https://github.com/openstack/keystonemiddleware/commit/de15a610e160defb367b224258498727384d10a8
(10.5.0)
CVE-2026-0708
NOTE: https://github.com/vstakhov/libucl/issues/323
TODO: check if impacts security wise rspamd, which embeds libucl and
uses it a compile time
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dee4006b3699597fa71fde10a969658065720226
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dee4006b3699597fa71fde10a969658065720226
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
