Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2b8583e3 by Moritz Muehlenhoff at 2026-09-29T23:08:11+02:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -54,8 +54,10 @@ CVE-2026-96428 (SQL Injection in the
/WebAgenda/SMBAjaxAutoComplete.do API endpo
CVE-2026-95520 (A heap-based buffer overflow flaw was found in rpm. Parsing a
symlink ...)
- rpm <unfixed>
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2537809
+CVE-2026-19395
+ NOT-FOR-US: Qt for MCUs
CVE-2026-95509 (Strings optimized for Latin-1 displaying Latin-1 characters
cause inco ...)
- TODO: check
+ NOT-FOR-US: Qt for MCUs
CVE-2026-94954 (A stack-based buffer overflow vulnerability exists in the web
manageme ...)
NOT-FOR-US: TOTOLINK
CVE-2026-93332 (Improper access control in the partial connection API in
Devolutions S ...)
@@ -318,17 +320,17 @@ CVE-2026-102710 (Attacker model / Preconditions: a loaded
`TXM_MODULE_USER_MODE
CVE-2026-102709 (Improper validation of non-secure (NS) pointers in multiple
TrustZone- ...)
NOT-FOR-US: Eclipse
CVE-2026-102697 (Ollama versions 0.14.0 before 0.31.2 contain an incorrect
authorizatio ...)
- TODO: check
+ - ollama <itp> (bug #1094806)
CVE-2026-102677 (Electron is a framework for writing cross-platform desktop
application ...)
- TODO: check
+ - electron <itp> (bug #842420)
CVE-2026-102676 (Electron is a framework for writing cross-platform desktop
application ...)
- TODO: check
+ - electron <itp> (bug #842420)
CVE-2026-102675 (Electron is a framework for writing cross-platform desktop
application ...)
- TODO: check
+ - electron <itp> (bug #842420)
CVE-2026-102674 (Electron is a framework for writing cross-platform desktop
application ...)
- TODO: check
+ - electron <itp> (bug #842420)
CVE-2026-102673 (Electron is a framework for writing cross-platform desktop
application ...)
- TODO: check
+ - electron <itp> (bug #842420)
CVE-2026-102639 (MobilityDB version 1.3.0 and earlier contains an
out-of-bounds read vu ...)
TODO: check
CVE-2026-102635 (ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain
uninitializ ...)
@@ -350,11 +352,11 @@ CVE-2026-102600 (Socket.IO enables bidirectional and
low-latency communication f
CVE-2026-102598 (Werkzeug is a comprehensive WSGI web application library.
Prior to 3.1 ...)
TODO: check
CVE-2026-102570 (ClipBucket v5 through 5.5.3-#197 contains a time-based blind
SQL injec ...)
- TODO: check
+ NOT-FOR-US: ClipBucket
CVE-2026-102569 (ClipBucket v5 through 5.5.3-#197 contains a time-based blind
SQL injec ...)
- TODO: check
+ NOT-FOR-US: ClipBucket
CVE-2026-102568 (Pardus Parental Control before 0.7.0 contains an incorrect
authorizati ...)
- TODO: check
+ NOT-FOR-US: Pardus Parental Control
CVE-2026-102567 (CTranslate2 before 4.8.1 contains an out-of-bounds heap read
vulnerabi ...)
TODO: check
CVE-2026-102566 (CTranslate2 before 4.8.1 contains a heap-based buffer
overflow in the ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2b8583e3be66de4ba63e70f6696aca2e0d8a03ff
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2b8583e3be66de4ba63e70f6696aca2e0d8a03ff
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
