[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0ea23d4a by Salvatore Bonaccorso at 2025-06-23T22:28:40+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -29,11 +29,11 @@ CVE-2025-52969 (ClickHouse 25.7.1.557 allows low-privileged users to execute she
 CVE-2025-52968 (xdg-open in xdg-utils through 1.2.1 can send requests containing SameS ...)
 	TODO: check
 CVE-2025-52967 (gateway_proxy_handler in MLflow before 3.1.0 lacks gateway_path valida ...)
-	TODO: check
+	NOT-FOR-US: mlflow
 CVE-2025-52939 (Out-of-bounds Write vulnerability in dail8859 NotepadNext (src/lua/src ...)
-	TODO: check
+	NOT-FOR-US: dail8859 NotepadNext
 CVE-2025-52938 (Out-of-bounds Read vulnerability in dail8859 NotepadNext (src/lua/src  ...)
-	TODO: check
+	NOT-FOR-US: dail8859 NotepadNext
 CVE-2025-52937 (Vulnerability in PointCloudLibrary PCL (surface/src/3rdparty/opennurbs ...)
 	TODO: check
 CVE-2025-52936 (Improper Link Resolution Before File Access ('Link Following') vulnera ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0ea23d4aa71a5577b867ddf1544421e158a5e382

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0ea23d4aa71a5577b867ddf1544421e158a5e382
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250623/f6cd3497/attachment-0001.htm>