Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
054bf022 by Salvatore Bonaccorso at 2026-06-27T10:00:31+02:00
Add two lxd issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -386,9 +386,16 @@ CVE-2026-53279 (In the Linux kernel, the following
vulnerability has been resolv
CVE-2026-9699 (Mattermost Plugins versions <=11.6 10.18.11 11.3.6 11.6.5.0
fail to sa ...)
NOT-FOR-US: Mattermost Plugins
CVE-2026-9640 (A privilege escalation vulnerability exists in LXD from 6.0
before 6.9 ...)
- TODO: check
+ - lxd <removed>
+ NOTE:
https://github.com/canonical/lxd/security/advisories/GHSA-ppq7-4492-5552
+ NOTE: https://github.com/canonical/lxd/pull/18301
+ NOTE: https://github.com/canonical/lxd/pull/18303
+ NOTE: https://github.com/canonical/lxd/pull/18304
CVE-2026-9639 (Nil-pointer dereference in CreateCustomVolumeFromBackup in LXD
up to v ...)
- TODO: check
+ - lxd <removed>
+ NOTE:
https://github.com/canonical/lxd/security/advisories/GHSA-j93m-3j9p-m5m8
+ NOTE: https://github.com/canonical/lxd/pull/18320
+ NOTE: https://github.com/canonical/lxd/pull/18390
CVE-2026-6658 (A vulnerability in jupyter/nbconvert versions <= 7.17.0 allows
for Cro ...)
- nbconvert <unfixed>
NOTE: https://huntr.com/bounties/47570290-3b26-4477-8cfa-fdef7db5aefe
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/054bf02209d73e2141443571e25bdf6b0313a2e3
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/054bf02209d73e2141443571e25bdf6b0313a2e3
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
