Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
bf9e9a7d by Salvatore Bonaccorso at 2026-09-14T20:12:08+02:00
Update information for CVE-2026-87853/sssd
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3931,6 +3931,10 @@ CVE-2026-87853 (A flaw was found in SSSD's IdP
authentication provider. The eval
- sssd <unfixed>
[trixie] - sssd <no-dsa> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2530888
+ NOTE: https://github.com/SSSD/sssd/pull/9250
+ NOTE: Fixed by:
https://github.com/SSSD/sssd/commit/f3a324918c1a35bd0195a1de5b17897a0d3b6274
(master)
+ NOTE: Fixed by:
https://github.com/SSSD/sssd/commit/8180e70a2708dbf8ac6f089119922dec81fcc503
(sssd-2-13)
+ NOTE: Fixed by:
https://github.com/SSSD/sssd/commit/542411bb0b6e4171d9183fbf364d6cb52d848ad5
(sssd-2-12)
CVE-2026-87827 (Certain KGUARD DVR devices running vulnerable firmware expose
a system ...)
NOT-FOR-US: KGUARD DVR devices
CVE-2026-87825 (zstd-jni before 1.5.7-14 contains a use-after-free
vulnerability where ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bf9e9a7d8a36e43b26a6c407be2014c77d338307
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bf9e9a7d8a36e43b26a6c407be2014c77d338307
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
