Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
917d775f by Salvatore Bonaccorso at 2026-09-19T09:44:35+02:00
Add two more netty issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -33,9 +33,13 @@ CVE-2026-93739 (A vulnerability was determined in Totolink
A3002MU Hh-B20211125.
CVE-2026-93738 (A vulnerability was found in Totolink A3002MU
Hh-B20211125.1046. This ...)
NOT-FOR-US: TOTOLINK
CVE-2026-93574 (A flaw was found in Netty's `netty-codec-http` component. A
remote att ...)
- TODO: check
+ - netty <unfixed>
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2536966
+ NOTE:
https://github.com/netty/netty/security/advisories/GHSA-j4mg-hqgv-34qc
CVE-2026-93562 (A flaw was found in Netty's HTTP/1 decoder. Incomplete
validation of m ...)
- TODO: check
+ - netty <unfixed>
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2536951
+ NOTE:
https://github.com/netty/netty/security/advisories/GHSA-hcvj-94mj-jp5c
CVE-2026-93031 (The WP Cloud Plugins Use-your-Drive, Out-of-the-Box,
Share-one-Drive, ...)
NOT-FOR-US: WordPress plugin
CVE-2026-92967 (The Pochipp plugin for WordPress is vulnerable to Reflected
Cross-Site ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/917d775fa70f5f0f2dd8bd43776912c53e14c3a1
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/917d775fa70f5f0f2dd8bd43776912c53e14c3a1
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
