[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Dec 26 08:13:49 GMT 2025



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cc2538f4 by security tracker role at 2025-12-26T08:13:42+00:00
automatic NOT-FOR-US entries update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -21,13 +21,13 @@ CVE-2025-68938 (Gitea before 1.25.2 mishandles authorization for deletion of rel
 CVE-2025-68937 (Forgejo before 13.0.2 allows attackers to write to unintended files, a ...)
 	TODO: check
 CVE-2025-67450 (Due to insecure library loading in the Eaton UPS Companion software ex ...)
-	TODO: check
+	NOT-FOR-US: Eaton
 CVE-2025-62578 (DVP-12SE - Modbus/TCP Cleartext Transmission of Sensitive Information)
-	TODO: check
+	NOT-FOR-US: Delta Electronics
 CVE-2025-59888 (Improper quotation in search paths in the Eaton UPS Companion software ...)
-	TODO: check
+	NOT-FOR-US: Eaton
 CVE-2025-59887 (Improper authentication of library files in the Eaton UPS Companion so ...)
-	TODO: check
+	NOT-FOR-US: Eaton
 CVE-2025-52601 (Cybersecurity Nozomi Networks Labs, a specialized security company foc ...)
 	TODO: check
 CVE-2025-52600 (Cybersecurity Nozomi Networks Labs, a specialized security company foc ...)
@@ -63,7 +63,7 @@ CVE-2025-15087 (A security vulnerability has been detected in youlaitech youlai-
 CVE-2025-15086 (A weakness has been identified in youlaitech youlai-mall 1.0.0/2.0.0.  ...)
 	TODO: check
 CVE-2025-14913 (The Frontend Post Submission Manager Lite \u2013 Frontend Posting Word ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-14820
 	REJECTED
 CVE-2025-14715



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cc2538f41b436eddfce75d843ca711ec1519e2d0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cc2538f41b436eddfce75d843ca711ec1519e2d0
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251226/313a7498/attachment.htm>


More information about the debian-security-tracker-commits mailing list