Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
9a18e09c by Salvatore Bonaccorso at 2026-02-26T22:21:41+01:00
Add CVE-2026-27830/c3p0
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -222,7 +222,9 @@ CVE-2026-27837 (Dottie provides nested object access and
manipulation in JavaScr
CVE-2026-27831 (rldns is an open source DNS server. Version 2.3 has a
heap-based out-o ...)
NOT-FOR-US: rldns
CVE-2026-27830 (c3p0, a JDBC Connection pooling library, is vulnerable to
attack via m ...)
- TODO: check
+ - c3p0 <unfixed>
+ NOTE:
https://github.com/swaldman/c3p0/security/advisories/GHSA-5476-xc4j-rqcv
+ NOTE: Fixed by:
https://github.com/swaldman/c3p0/commit/e14cbd8166e423e2e9a9d6f08b2add3433492d6e
(v0.12.0)
CVE-2026-27829 (Astro is a web framework. In versions 9.0.0 through 9.5.3, a
bug in As ...)
NOT-FOR-US: Astro
CVE-2026-27821 (GPAC is an open-source multimedia framework. In versions up to
and inc ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9a18e09cdcf4f444a2be9b5b428644f3baa7579d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9a18e09cdcf4f444a2be9b5b428644f3baa7579d
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
