Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e868893e by Salvatore Bonaccorso at 2026-09-07T21:35:59+02:00
Add new misp issues, itp'ed
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -63,13 +63,13 @@ CVE-2026-86469 (A flaw was found in GLib2. When
g_file_replace() is used with G_
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2473839
NOTE: https://gitlab.gnome.org/GNOME/glib/-/work_items/4044
CVE-2026-86452 (Affected versions of MISP permit unauthenticated or weakly
constrained ...)
- TODO: check
+ - misp <itp> (bug #1144317)
CVE-2026-86451 (Affected versions of MISP allow authenticated users to
retrieve object ...)
- TODO: check
+ - misp <itp> (bug #1144317)
CVE-2026-86441 (Affected versions of MISP contain inconsistent authorization
checks ac ...)
- TODO: check
+ - misp <itp> (bug #1144317)
CVE-2026-86440 (Affected versions of MISP insufficiently validate URLs used by
dashboa ...)
- TODO: check
+ - misp <itp> (bug #1144317)
CVE-2026-86435 (commonmark versions from 1.5.0 before 2.8.4 contain a denial
of servic ...)
TODO: check
CVE-2026-86434 (league/commonmark versions >= 2.0.0 and < 2.8.4 (patched in
2.9.0) con ...)
@@ -103,23 +103,23 @@ CVE-2026-86421 (ImageMagick before 7.1.2-30 and 6.9.13-55
contains a memory leak
CVE-2026-86420 (ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly
lower the ...)
TODO: check
CVE-2026-86419 (Affected versions of MISP contain insufficient validation of
server-si ...)
- TODO: check
+ - misp <itp> (bug #1144317)
CVE-2026-86418 (Affected versions of MISP expose organisation metadata through
the das ...)
- TODO: check
+ - misp <itp> (bug #1144317)
CVE-2026-86417 (Affected versions of MISP inconsistently enforced
email-address visibi ...)
- TODO: check
+ - misp <itp> (bug #1144317)
CVE-2026-86416 (ILIAS versions before 9.23, 10.11, and 11.4 contain an
authorization b ...)
TODO: check
CVE-2026-86408 (Affected versions of MISP do not enforce parent-event
visibility when ...)
- TODO: check
+ - misp <itp> (bug #1144317)
CVE-2026-86404 (EAP's Artemis deserialization configuration permits
deserialization by ...)
TODO: check
CVE-2026-86351 (Affected versions of MISP validate the user-configurable
homepage by c ...)
- TODO: check
+ - misp <itp> (bug #1144317)
CVE-2026-86347 (Affected versions of MISP allow any authenticated user to
access Templ ...)
- TODO: check
+ - misp <itp> (bug #1144317)
CVE-2026-86342 (Affected versions of MISP contain improper authorization
checks in the ...)
- TODO: check
+ - misp <itp> (bug #1144317)
CVE-2026-86332 (A flaw was found in odh-dashboard in Red Hat OpenShift AI. The
backend ...)
TODO: check
CVE-2026-86321 (A vulnerability was found in java-json-tools jackson-coreutils
2.0. Af ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e868893eaf3a5cfcda32e34b9f63fdad072bd476
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e868893eaf3a5cfcda32e34b9f63fdad072bd476
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
