Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
57b21d33 by Salvatore Bonaccorso at 2026-09-30T11:04:22+02:00
Add new u-boot issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -159,13 +159,21 @@ CVE-2026-75824 (The User Frontend WordPress plugin
before 4.3.12 does not check
CVE-2026-75823 (The User Frontend WordPress plugin before 4.3.12 does not
prevent tam ...)
NOT-FOR-US: WordPress plugin
CVE-2026-74225 (U-Boot before 2026.10-rc5 contains out-of-bounds memory access
in dhcp ...)
- TODO: check
+ - u-boot <unfixed>
+ NOTE: Introduced with:
https://github.com/u-boot/u-boot/commit/a0245818f7f8e375abc00f36ff88326331e4e2f9
(v2023.07-rc2)
+ NOTE: Fixed by:
https://github.com/u-boot/u-boot/commit/20209a62bc8565fc1e040882bc03c71ff0d73076
(v2026.10-rc5)
CVE-2026-74222 (U-Boot before 2026.10-rc5 contains a use-after-free
vulnerability in t ...)
- TODO: check
+ - u-boot <not-affected> (Vulnerable code introduced later)
+ NOTE: Introduced with:
https://github.com/u-boot/u-boot/commit/e40c910e88a9a38ee1335ab1391dc2ee83993a65
(v2025.07-rc3)
+ NOTE: Fixed by:
https://github.com/u-boot/u-boot/commit/2d94618a58aeb7630f18eee33419ce48d0fd3616
(v2026.10-rc5)
CVE-2026-74221 (U-Boot before 2026.10-rc5 contains a buffer overflow in
nfs_readlink_r ...)
- TODO: check
+ - u-boot <unfixed>
+ NOTE: Introduced with:
https://github.com/u-boot/u-boot/commit/cf3a4f1e86ecdd24f87b615051b49d8e1968c230
(v2019.10-rc4)
+ NOTE: Fixed by:
https://github.com/u-boot/u-boot/commit/1c0aff3a5fbfeee7a8948f624e0b8554e6e0d8fd
(v2026.10-rc5)
CVE-2026-74220 (U-Boot before 2026.10-rc5 contains a buffer overflow in
nfs_read_reply ...)
- TODO: check
+ - u-boot <unfixed>
+ NOTE: Introduced with:
https://github.com/u-boot/u-boot/commit/aa207cf3a6d68f39d64cd29057a4fb63943e9078
(v2019.10-rc4)
+ NOTE: Fixed by:
https://github.com/u-boot/u-boot/commit/0bbf09859658b8cc9ac13be41af23b516b8ef69a
(v2026.10-rc5)
CVE-2026-72510 (The "supplier_no" parameter used in the business allocation
search fea ...)
TODO: check
CVE-2026-72507 (The "reportType" parameter in the product summary report
feature withi ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/57b21d337ab89deaa62bba74da4e45a1af7fcdd0
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/57b21d337ab89deaa62bba74da4e45a1af7fcdd0
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
