Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
02af0cf3 by Salvatore Bonaccorso at 2026-10-03T21:46:17+02:00
Process some more NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -46,7 +46,7 @@ CVE-2026-71885 (In Bouncy Castle for Java before 1.86, the
Messaging Layer Secur
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9071885
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/77632a57edf350a7b5751fca1a5052daffa8dab2
(v1rv86)
CVE-2026-71883 (In Bouncy Castle for Java LTS before 2.73.13, the one-shot
native pack ...)
- TODO: check
+ NOT-FOR-US: Bouncycastle components not packaged in Debian
CVE-2026-18040 (In Bouncy Castle for Java before 1.86, HQC leaked
secret-derived data ...)
TODO: check
CVE-2026-105122 (OpenAM before 16.1.3 contains a server-side request forgery
vulnerabil ...)
@@ -68,11 +68,11 @@ CVE-2026-105115 (OpenAM before 16.1.3 contains an
unauthenticated arbitrary clas
CVE-2026-105114 (OpenAM before 16.1.3 contains a reflected cross-site
scripting vulnera ...)
NOT-FOR-US: OpenAM
CVE-2026-105113 (Nezha Dashboard from 1.8.0 before 2.3.13 contains an improper
locking ...)
- TODO: check
+ NOT-FOR-US: Nezha Dashboard
CVE-2026-105112 (Nezha from 1.8.0 before 2.3.13 contains a lock-order
inversion in Upda ...)
- TODO: check
+ NOT-FOR-US: Nezha
CVE-2026-105105 (CWE-306: Missing Authentication for Critical Function in the
ait.core. ...)
- TODO: check
+ NOT-FOR-US: NASA-AMMOS AIT-Core
CVE-2026-104983 (A vulnerability has been found in Linux Mint Xreader up to
4.6.9. Impa ...)
TODO: check
CVE-2026-104982 (A flaw has been found in Linux Mint Xreader up to 4.6.5. This
issue af ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/02af0cf322c90d4a4d6db850490e67b31bd09cb0
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/02af0cf322c90d4a4d6db850490e67b31bd09cb0
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
