Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
cd30d481 by Salvatore Bonaccorso at 2026-08-18T06:56:30+02:00
Add two new netty issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -207,9 +207,16 @@ CVE-2026-59910 (Dell ObjectScale, versions prior to
4.3.0.1, contain(s) an Impro
CVE-2026-59909 (Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path
Travers ...)
NOT-FOR-US: Dell / EMC
CVE-2026-59903 (Netty is an asynchronous, event-driven network application
framework. ...)
- TODO: check
+ - netty <unfixed>
+ NOTE:
https://github.com/netty/netty/security/advisories/GHSA-8c42-7qj2-3j46
+ NOTE: https://github.com/netty/netty/pull/17213 (4.2-branch)
+ NOTE: https://github.com/netty/netty/pull/17217 (4.1-branch)
CVE-2026-59902 (Netty is an asynchronous, event-driven network application
framework. ...)
- TODO: check
+ - netty <unfixed>
+ NOTE:
https://github.com/netty/netty/security/advisories/GHSA-2qj4-mmr9-4v2f
+ NOTE: https://github.com/netty/netty/pull/17213 (4.2-branch)
+ NOTE: https://github.com/netty/netty/pull/17217 (4.1-branch)
+ NOTE: Fixed by:
https://github.com/netty/netty/commit/1b5abc6443b63726c72cdd285af2feb7ddbb8ff7
(netty-4.2.17.Final)
CVE-2026-59894 (sqlparse is a non-validating SQL parser module for Python.
Prior to 0. ...)
- sqlparse <unfixed>
NOTE:
https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-3496-9g83-7v6x
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd30d4817c0275c09eaca6b54716fdd1a25037dd
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd30d4817c0275c09eaca6b54716fdd1a25037dd
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
