Skip to content

Commit 290920b

Browse files
aboutcode-automationaboutcode-automation
committed
Sync Collecting Fix Commits: Sun Sep 13 22:04:49 UTC 2026
Signed-off-by: AboutCode Automation <automation@aboutcode.org>
1 parent 83af162 commit 290920b

5 files changed

Lines changed: 88 additions & 9 deletions

File tree

‎data/fix-commits/advisory-database-b78f1d41.json‎

Lines changed: 52 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,58 @@
11
{
22
"vcs_url": "https://github.com/github/advisory-database",
33
"vulnerabilities": {
4+
"GHSA-2X7F-7273-JX2J": {
5+
"955bdfd4137b2593688bc79426039bdf773e9800": "Publish Advisories\n\nGHSA-2x7f-7273-jx2j\nGHSA-63h9-9gmf-c466\nGHSA-j3hr-9jf2-7jhv\nGHSA-vmr6-g39x-qp82"
6+
},
7+
"GHSA-63H9-9GMF-C466": {
8+
"955bdfd4137b2593688bc79426039bdf773e9800": "Publish Advisories\n\nGHSA-2x7f-7273-jx2j\nGHSA-63h9-9gmf-c466\nGHSA-j3hr-9jf2-7jhv\nGHSA-vmr6-g39x-qp82"
9+
},
10+
"GHSA-J3HR-9JF2-7JHV": {
11+
"955bdfd4137b2593688bc79426039bdf773e9800": "Publish Advisories\n\nGHSA-2x7f-7273-jx2j\nGHSA-63h9-9gmf-c466\nGHSA-j3hr-9jf2-7jhv\nGHSA-vmr6-g39x-qp82"
12+
},
13+
"GHSA-VMR6-G39X-QP82": {
14+
"955bdfd4137b2593688bc79426039bdf773e9800": "Publish Advisories\n\nGHSA-2x7f-7273-jx2j\nGHSA-63h9-9gmf-c466\nGHSA-j3hr-9jf2-7jhv\nGHSA-vmr6-g39x-qp82"
15+
},
16+
"GHSA-3XV5-8PF6-5753": {
17+
"c43892705fb3ee65522159dc72e9ed3faeeae2fa": "Publish Advisories\n\nGHSA-3xv5-8pf6-5753\nGHSA-78gm-9375-9qmx\nGHSA-cmr7-8r63-rmg9\nGHSA-f265-5853-cc9h\nGHSA-mhmh-w2v2-6xg3\nGHSA-xrq6-q643-mcv3"
18+
},
19+
"GHSA-78GM-9375-9QMX": {
20+
"c43892705fb3ee65522159dc72e9ed3faeeae2fa": "Publish Advisories\n\nGHSA-3xv5-8pf6-5753\nGHSA-78gm-9375-9qmx\nGHSA-cmr7-8r63-rmg9\nGHSA-f265-5853-cc9h\nGHSA-mhmh-w2v2-6xg3\nGHSA-xrq6-q643-mcv3"
21+
},
22+
"GHSA-CMR7-8R63-RMG9": {
23+
"c43892705fb3ee65522159dc72e9ed3faeeae2fa": "Publish Advisories\n\nGHSA-3xv5-8pf6-5753\nGHSA-78gm-9375-9qmx\nGHSA-cmr7-8r63-rmg9\nGHSA-f265-5853-cc9h\nGHSA-mhmh-w2v2-6xg3\nGHSA-xrq6-q643-mcv3"
24+
},
25+
"GHSA-F265-5853-CC9H": {
26+
"c43892705fb3ee65522159dc72e9ed3faeeae2fa": "Publish Advisories\n\nGHSA-3xv5-8pf6-5753\nGHSA-78gm-9375-9qmx\nGHSA-cmr7-8r63-rmg9\nGHSA-f265-5853-cc9h\nGHSA-mhmh-w2v2-6xg3\nGHSA-xrq6-q643-mcv3"
27+
},
28+
"GHSA-MHMH-W2V2-6XG3": {
29+
"c43892705fb3ee65522159dc72e9ed3faeeae2fa": "Publish Advisories\n\nGHSA-3xv5-8pf6-5753\nGHSA-78gm-9375-9qmx\nGHSA-cmr7-8r63-rmg9\nGHSA-f265-5853-cc9h\nGHSA-mhmh-w2v2-6xg3\nGHSA-xrq6-q643-mcv3"
30+
},
31+
"GHSA-XRQ6-Q643-MCV3": {
32+
"c43892705fb3ee65522159dc72e9ed3faeeae2fa": "Publish Advisories\n\nGHSA-3xv5-8pf6-5753\nGHSA-78gm-9375-9qmx\nGHSA-cmr7-8r63-rmg9\nGHSA-f265-5853-cc9h\nGHSA-mhmh-w2v2-6xg3\nGHSA-xrq6-q643-mcv3"
33+
},
34+
"GHSA-4JPH-RGQM-GXCV": {
35+
"c70e6662fd0f4f12fc29c1adf5736bd83d1787a2": "Publish Advisories\n\nGHSA-4jph-rgqm-gxcv\nGHSA-5332-wv38-3pxg\nGHSA-8cv5-h88c-pcq8\nGHSA-8g7w-hw7q-6jwq\nGHSA-pj36-c4f6-677h\nGHSA-xww7-g6xr-3jgc"
36+
},
37+
"GHSA-5332-WV38-3PXG": {
38+
"c70e6662fd0f4f12fc29c1adf5736bd83d1787a2": "Publish Advisories\n\nGHSA-4jph-rgqm-gxcv\nGHSA-5332-wv38-3pxg\nGHSA-8cv5-h88c-pcq8\nGHSA-8g7w-hw7q-6jwq\nGHSA-pj36-c4f6-677h\nGHSA-xww7-g6xr-3jgc"
39+
},
40+
"GHSA-8CV5-H88C-PCQ8": {
41+
"c70e6662fd0f4f12fc29c1adf5736bd83d1787a2": "Publish Advisories\n\nGHSA-4jph-rgqm-gxcv\nGHSA-5332-wv38-3pxg\nGHSA-8cv5-h88c-pcq8\nGHSA-8g7w-hw7q-6jwq\nGHSA-pj36-c4f6-677h\nGHSA-xww7-g6xr-3jgc"
42+
},
43+
"GHSA-8G7W-HW7Q-6JWQ": {
44+
"c70e6662fd0f4f12fc29c1adf5736bd83d1787a2": "Publish Advisories\n\nGHSA-4jph-rgqm-gxcv\nGHSA-5332-wv38-3pxg\nGHSA-8cv5-h88c-pcq8\nGHSA-8g7w-hw7q-6jwq\nGHSA-pj36-c4f6-677h\nGHSA-xww7-g6xr-3jgc"
45+
},
46+
"GHSA-PJ36-C4F6-677H": {
47+
"c70e6662fd0f4f12fc29c1adf5736bd83d1787a2": "Publish Advisories\n\nGHSA-4jph-rgqm-gxcv\nGHSA-5332-wv38-3pxg\nGHSA-8cv5-h88c-pcq8\nGHSA-8g7w-hw7q-6jwq\nGHSA-pj36-c4f6-677h\nGHSA-xww7-g6xr-3jgc"
48+
},
49+
"GHSA-XWW7-G6XR-3JGC": {
50+
"c70e6662fd0f4f12fc29c1adf5736bd83d1787a2": "Publish Advisories\n\nGHSA-4jph-rgqm-gxcv\nGHSA-5332-wv38-3pxg\nGHSA-8cv5-h88c-pcq8\nGHSA-8g7w-hw7q-6jwq\nGHSA-pj36-c4f6-677h\nGHSA-xww7-g6xr-3jgc"
51+
},
52+
"GHSA-W67G-5RQW-F597": {
53+
"225d903306538a1827e6ad04ab96148d0a0f895f": "Improve GHSA-w67g-5rqw-f597",
54+
"ae18e79ee2fd225857e862ffbe177883abfade5e": "Publish GHSA-w67g-5rqw-f597"
55+
},
456
"GHSA-86MV-H6PR-C65G": {
557
"3a8e856b736ec20bc971630bb9ca4b5c98a28257": "Publish Advisories\n\nGHSA-86mv-h6pr-c65g\nGHSA-8c4x-72fw-q8r4\nGHSA-p97w-828x-xgcq\nGHSA-phcr-xqg5-c575\nGHSA-w4jv-8c85-g535\nGHSA-wj27-rfm4-9hp4\nGHSA-wxqf-6chr-729j\nGHSA-x9xf-h66v-mjmc\nGHSA-xq53-pwg9-5mgh\nGHSA-xvhf-cv8g-xhpr"
658
},
@@ -5570,9 +5622,6 @@
55705622
"GHSA-JM48-M3RR-9HGG": {
55715623
"2bc581c0d38a46aa30575dfe8c80176a46fc0584": "Publish Advisories\n\nGHSA-p68j-q8j9-jwf5\nGHSA-275c-xpvc-jgfw\nGHSA-jm48-m3rr-9hgg\nGHSA-p68j-q8j9-jwf5"
55725624
},
5573-
"GHSA-W67G-5RQW-F597": {
5574-
"ae18e79ee2fd225857e862ffbe177883abfade5e": "Publish GHSA-w67g-5rqw-f597"
5575-
},
55765625
"GHSA-4PH6-MJV7-3FQ6": {
55775626
"9f282d72ec6eaf400bf8043c5994ed2c1752a2ba": "Publish GHSA-4ph6-mjv7-3fq6"
55785627
},

‎data/fix-commits/buildroot-0b809119.json‎

Lines changed: 13 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,19 @@
11
{
22
"vcs_url": "https://github.com/buildroot/buildroot",
33
"vulnerabilities": {
4+
"CVE-2020-11022": {
5+
"43558e103b50bfaad42f8d265ad971479de42af8": "package/znc: security bump version to 1.10.3\n\nhttps://github.com/znc/znc/blob/znc-1.10.3/ChangeLog.md\nhttps://wiki.znc.in/ChangeLog/1.10.3\n\nFixes CVE-2020-11022, CVE-2020-11023, CVE-2026-82373 & CVE-2026-82374.\n\nUpdated _SITE according to\nhttps://wiki.znc.in/index.php?title=ZNC&diff=3493&oldid=3460\n\nSigned-off-by: Bernd Kuhls <bernd@kuhls.net>\nSigned-off-by: Julien Olivain <ju.o@free.fr>",
6+
"11f1178c14ecf6f9accc646ec6b50b6a7a3c86ec": "package/angularjs: security bump version to 1.8.0\n\nFixes the following security issue:\n\n- CVE-2020-11022: Potential XSS vulnerability in jQuery\n https://github.com/advisories/GHSA-gxr4-xjj5-5px2\n\nSigned-off-by: Ignacy Gaw\u0119dzki <ignacy.gawedzki@green-communications.fr>\n[yann.morin.1998@free.fr: two spaces in hash file]\nSigned-off-by: Yann E. MORIN <yann.morin.1998@free.fr>\n(cherry picked from commit 4fc87ffb5011444dc8dfac59c782884e5e61122b)\nSigned-off-by: Peter Korsgaard <peter@korsgaard.com>"
7+
},
8+
"CVE-2020-11023": {
9+
"43558e103b50bfaad42f8d265ad971479de42af8": "package/znc: security bump version to 1.10.3\n\nhttps://github.com/znc/znc/blob/znc-1.10.3/ChangeLog.md\nhttps://wiki.znc.in/ChangeLog/1.10.3\n\nFixes CVE-2020-11022, CVE-2020-11023, CVE-2026-82373 & CVE-2026-82374.\n\nUpdated _SITE according to\nhttps://wiki.znc.in/index.php?title=ZNC&diff=3493&oldid=3460\n\nSigned-off-by: Bernd Kuhls <bernd@kuhls.net>\nSigned-off-by: Julien Olivain <ju.o@free.fr>"
10+
},
11+
"CVE-2026-82373": {
12+
"43558e103b50bfaad42f8d265ad971479de42af8": "package/znc: security bump version to 1.10.3\n\nhttps://github.com/znc/znc/blob/znc-1.10.3/ChangeLog.md\nhttps://wiki.znc.in/ChangeLog/1.10.3\n\nFixes CVE-2020-11022, CVE-2020-11023, CVE-2026-82373 & CVE-2026-82374.\n\nUpdated _SITE according to\nhttps://wiki.znc.in/index.php?title=ZNC&diff=3493&oldid=3460\n\nSigned-off-by: Bernd Kuhls <bernd@kuhls.net>\nSigned-off-by: Julien Olivain <ju.o@free.fr>"
13+
},
14+
"CVE-2026-82374": {
15+
"43558e103b50bfaad42f8d265ad971479de42af8": "package/znc: security bump version to 1.10.3\n\nhttps://github.com/znc/znc/blob/znc-1.10.3/ChangeLog.md\nhttps://wiki.znc.in/ChangeLog/1.10.3\n\nFixes CVE-2020-11022, CVE-2020-11023, CVE-2026-82373 & CVE-2026-82374.\n\nUpdated _SITE according to\nhttps://wiki.znc.in/index.php?title=ZNC&diff=3493&oldid=3460\n\nSigned-off-by: Bernd Kuhls <bernd@kuhls.net>\nSigned-off-by: Julien Olivain <ju.o@free.fr>"
16+
},
417
"GHSA-V7W4-4GC9-QCGV": {
518
"17be3c2dcd33a57e1a606416146e1f110c09bba2": "package/tpm2-tools: security bump version to 5.8\n\nhttps://github.com/tpm2-software/tpm2-tools/blob/5.8/docs/CHANGELOG.md\n\nFixes: GHSA-v7w4-4gc9-qcgv, GHSA-gwfg-w3jr-xh66 & GHSA-qp88-8f4j-wv7q.\n\nSwitched to sha256 tarball hash provided by upstream.\n\nSigned-off-by: Bernd Kuhls <bernd@kuhls.net>\nSigned-off-by: Julien Olivain <ju.o@free.fr>"
619
},
@@ -22201,9 +22214,6 @@
2220122214
"b119b717f263634a9474d0a918a62b42186e7361": "package/libraw: security bump to version 0.20.2\n\nFix CVE-2020-24890: libraw 20.0 has a null pointer dereference\nvulnerability in parse_tiff_ifd in src/metadata/tiff.cpp, which may\nresult in context-dependent arbitrary code execution.\n\nhttps://www.libraw.org/news/libraw-0-20-2-Release\n\nSigned-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>\nSigned-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>\n(cherry picked from commit 1a05b7cc7c10b070669722a80af182d7b7974a0d)\nSigned-off-by: Peter Korsgaard <peter@korsgaard.com>",
2220222215
"1a05b7cc7c10b070669722a80af182d7b7974a0d": "package/libraw: security bump to version 0.20.2\n\nFix CVE-2020-24890: libraw 20.0 has a null pointer dereference\nvulnerability in parse_tiff_ifd in src/metadata/tiff.cpp, which may\nresult in context-dependent arbitrary code execution.\n\nhttps://www.libraw.org/news/libraw-0-20-2-Release\n\nSigned-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>\nSigned-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>"
2220322216
},
22204-
"CVE-2020-11022": {
22205-
"11f1178c14ecf6f9accc646ec6b50b6a7a3c86ec": "package/angularjs: security bump version to 1.8.0\n\nFixes the following security issue:\n\n- CVE-2020-11022: Potential XSS vulnerability in jQuery\n https://github.com/advisories/GHSA-gxr4-xjj5-5px2\n\nSigned-off-by: Ignacy Gaw\u0119dzki <ignacy.gawedzki@green-communications.fr>\n[yann.morin.1998@free.fr: two spaces in hash file]\nSigned-off-by: Yann E. MORIN <yann.morin.1998@free.fr>\n(cherry picked from commit 4fc87ffb5011444dc8dfac59c782884e5e61122b)\nSigned-off-by: Peter Korsgaard <peter@korsgaard.com>"
22206-
},
2220722217
"GHSA-GXR4-XJJ5-5PX2": {
2220822218
"11f1178c14ecf6f9accc646ec6b50b6a7a3c86ec": "package/angularjs: security bump version to 1.8.0\n\nFixes the following security issue:\n\n- CVE-2020-11022: Potential XSS vulnerability in jQuery\n https://github.com/advisories/GHSA-gxr4-xjj5-5px2\n\nSigned-off-by: Ignacy Gaw\u0119dzki <ignacy.gawedzki@green-communications.fr>\n[yann.morin.1998@free.fr: two spaces in hash file]\nSigned-off-by: Yann E. MORIN <yann.morin.1998@free.fr>\n(cherry picked from commit 4fc87ffb5011444dc8dfac59c782884e5e61122b)\nSigned-off-by: Peter Korsgaard <peter@korsgaard.com>"
2220922219
},

‎data/fix-commits/imagemagick-b15feb65.json‎

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,15 @@
11
{
22
"vcs_url": "https://github.com/imagemagick/imagemagick",
33
"vulnerabilities": {
4+
"GHSA-VXWM-JFJC-3R4X": {
5+
"48c49d0cc2b72970b762e0d3263f6c35ab35a7b4": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vxwm-jfjc-3r4x"
6+
},
7+
"GHSA-2FGX-26MG-J4F4": {
8+
"15ce9c9eaac8cf95728ec323ac249630c89a3111": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2fgx-26mg-j4f4"
9+
},
10+
"GHSA-58H4-RWR6-WJ72": {
11+
"d98509b23a547d9ccd0a8af8650d03c5c01c3722": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-58h4-rwr6-wj72"
12+
},
413
"GHSA-5J8X-VQ8C-VRP9": {
514
"5a5c2e51948fcc5d85b8d832938e2c1b4db4a699": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5j8x-vq8c-vrp9"
615
},

‎data/fix-commits/imagemagick6-19533b67.json‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,12 @@
11
{
22
"vcs_url": "https://github.com/imagemagick/imagemagick6",
33
"vulnerabilities": {
4+
"GHSA-VXWM-JFJC-3R4X": {
5+
"4c3be350c32863de21aba16480876200a9950589": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vxwm-jfjc-3r4x"
6+
},
7+
"GHSA-2FGX-26MG-J4F4": {
8+
"c238bc29c1cfb54aeee97f469344ab0360e0e61f": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2fgx-26mg-j4f4"
9+
},
410
"GHSA-5J8X-VQ8C-VRP9": {
511
"a32215ba7a193f2bc896ba6ed4be4013cc06e22b": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5j8x-vq8c-vrp9"
612
},

‎data/fix-commits/nixpkgs-97436190.json‎

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,10 @@
11
{
22
"vcs_url": "https://github.com/nixos/nixpkgs",
33
"vulnerabilities": {
4+
"CVE-2026-73295": {
5+
"d7553189a15e31104731f49869f4e6660e463499": "python3Packages.mkdocs-material: 9.7.6 -> 9.7.7\n\nThis release fixes CVE-2026-73295.\n\nhttps://redirect.github.com/squidfunk/mkdocs-material/releases/tag/9.7.7\n\nAssisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)\n(cherry picked from commit 915103b1a9877c89de7ab8665f4d7863591f560e)",
6+
"915103b1a9877c89de7ab8665f4d7863591f560e": "python3Packages.mkdocs-material: 9.7.6 -> 9.7.7\n\nThis release fixes CVE-2026-73295.\n\nhttps://redirect.github.com/squidfunk/mkdocs-material/releases/tag/9.7.7\n\nAssisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)"
7+
},
48
"CVE-2026-88924": {
59
"3f10f532dce9df4f457b7c4e60439b3177970422": "gvfs: 1.60.2 -> 1.60.3\n\nhttps://gitlab.gnome.org/GNOME/gvfs/-/compare/1.60.2...1.60.3\n\nFixes CVE-2026-88924\n\n(cherry picked from commit 4f78e23b8a553c1676e8ad5f2278d586141578d9)",
610
"4f78e23b8a553c1676e8ad5f2278d586141578d9": "gvfs: 1.60.2 -> 1.60.3\n\nhttps://gitlab.gnome.org/GNOME/gvfs/-/compare/1.60.2...1.60.3\n\nFixes CVE-2026-88924"
@@ -1001,6 +1005,10 @@
10011005
"CVE-2026-57211": {
10021006
"ef1b2e6a3b18b9cc96936dc4325daa26bcb66402": "rabbitmq-server: 4.2.5 -> 4.2.9\n\nhttps://github.com/rabbitmq/rabbitmq-server/releases/tag/v4.2.9\nhttps://github.com/rabbitmq/rabbitmq-server/releases/tag/v4.2.8\nhttps://github.com/rabbitmq/rabbitmq-server/releases/tag/v4.2.7\nhttps://github.com/rabbitmq/rabbitmq-server/releases/tag/v4.2.6\n\nFixes https://github.com/NixOS/nixpkgs/issues/542112\nFixes CVE-2026-57220, CVE-2026-57215, CVE-2026-57217, CVE-2026-57216,\nCVE-2026-57221, CVE-2026-57219, CVE-2026-57218 and CVE-2026-57211.\n\nNot-cherry-picked-because: unstable has been bumped to 4.3.x."
10031007
},
1008+
"CVE-2026-72818": {
1009+
"44d4339dab840c0b60dfce267aacc95ac7f8b695": "python3Packages.nltk: 3.10.0 -> 3.10.3\n\nhttps://redirect.github.com/nltk/nltk/compare/v3.10.0...v3.10.3\n\nFixes CVE-2026-72818. Keep NLTK data symlinks usable by allowing read-only access within the immutable Nix store.\n\nAssisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)\n(cherry picked from commit 898f2911099e5165b8fa9aa601dca46b3f1782c3)",
1010+
"898f2911099e5165b8fa9aa601dca46b3f1782c3": "python3Packages.nltk: 3.10.0 -> 3.10.3\n\nhttps://redirect.github.com/nltk/nltk/compare/v3.10.0...v3.10.3\n\nFixes CVE-2026-72818. Keep NLTK data symlinks usable by allowing read-only access within the immutable Nix store.\n\nAssisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)"
1011+
},
10041012
"CVE-2026-19579": {
10051013
"44f211161c71e686822bc7d65592a12b9635ce36": "snipe-it: 8.4.1 -> 8.7.2\n\nHardcoded `-P <port>` argument to mariadb lead to permission denied\nerrors, because it was no longer connecting to MariaDB over the unix socket.\nSee upstream PR: https://github.com/grokability/snipe-it/pull/19558\n\nFixes: https://github.com/NixOS/nixpkgs/issues/552187 (CVE-2026-19579)\nFixes: https://github.com/NixOS/nixpkgs/issues/542109 (CVE-2026-55479, CVE-2026-55476, CVE-2026-55516, CVE-2026-55466, CVE-2026-55481, CVE-2026-55843, CVE-2026-55515, CVE-2026-55464, CVE-2026-55461, CVE-2026-55452, CVE-2026-55474, CVE-2026-55460, CVE-2026-55475, CVE-2026-55478, CVE-2026-54329, CVE-2026-55469, CVE-2026-55472, CVE-2026-55462)\nFixes: https://github.com/NixOS/nixpkgs/issues/539900 (CVE-2026-48492)\nFixes: https://github.com/NixOS/nixpkgs/issues/539888 (CVE-2026-55542)\nFixes: https://github.com/NixOS/nixpkgs/issues/529813 (CVE-2026-48507)\n(cherry picked from commit c0052ade7751982f4e0c4d2d82e16c8482321034)",
10061014
"c0052ade7751982f4e0c4d2d82e16c8482321034": "snipe-it: 8.4.1 -> 8.7.2\n\nHardcoded `-P <port>` argument to mariadb lead to permission denied\nerrors, because it was no longer connecting to MariaDB over the unix socket.\nSee upstream PR: https://github.com/grokability/snipe-it/pull/19558\n\nFixes: https://github.com/NixOS/nixpkgs/issues/552187 (CVE-2026-19579)\nFixes: https://github.com/NixOS/nixpkgs/issues/542109 (CVE-2026-55479, CVE-2026-55476, CVE-2026-55516, CVE-2026-55466, CVE-2026-55481, CVE-2026-55843, CVE-2026-55515, CVE-2026-55464, CVE-2026-55461, CVE-2026-55452, CVE-2026-55474, CVE-2026-55460, CVE-2026-55475, CVE-2026-55478, CVE-2026-54329, CVE-2026-55469, CVE-2026-55472, CVE-2026-55462)\nFixes: https://github.com/NixOS/nixpkgs/issues/539900 (CVE-2026-48492)\nFixes: https://github.com/NixOS/nixpkgs/issues/539888 (CVE-2026-55542)\nFixes: https://github.com/NixOS/nixpkgs/issues/529813 (CVE-2026-48507)"
@@ -4002,9 +4010,6 @@
40024010
"85b6c990299c1a38121111423dcd33c25a8362b0": "grafana: 13.1.3 -> 13.1.4, fix CVE-2026-17183 (#555114)",
40034011
"f965dc431092ff21902d442275b289420f5cc705": "grafana: 13.1.3 -> 13.1.4, fix CVE-2026-17183\n\nChangeLog: https://github.com/grafana/grafana/releases/tag/v13.1.4"
40044012
},
4005-
"CVE-2026-72818": {
4006-
"898f2911099e5165b8fa9aa601dca46b3f1782c3": "python3Packages.nltk: 3.10.0 -> 3.10.3\n\nhttps://redirect.github.com/nltk/nltk/compare/v3.10.0...v3.10.3\n\nFixes CVE-2026-72818. Keep NLTK data symlinks usable by allowing read-only access within the immutable Nix store.\n\nAssisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)"
4007-
},
40084013
"CVE-2026-76017": {
40094014
"265263d1aca94dc0037d74698a720e287e9d6a8e": "ungoogled-chromium: 151.0.7922.169-1 -> 151.0.7922.173-1\n\nhttps://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0404570826.html\n\nThis update includes 7 security fixes.\n\nCVEs:\nCVE-2026-76017 CVE-2026-76018 CVE-2026-76019 CVE-2026-76020\nCVE-2026-76021 CVE-2026-76022 CVE-2026-76023\n\n(cherry picked from commit 582eaa82f2a9b3a2c21bac2d23bb8e829c5ff556)",
40104015
"582eaa82f2a9b3a2c21bac2d23bb8e829c5ff556": "ungoogled-chromium: 151.0.7922.169-1 -> 151.0.7922.173-1\n\nhttps://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0404570826.html\n\nThis update includes 7 security fixes.\n\nCVEs:\nCVE-2026-76017 CVE-2026-76018 CVE-2026-76019 CVE-2026-76020\nCVE-2026-76021 CVE-2026-76022 CVE-2026-76023",

0 commit comments

Comments
 (0)