[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
98b0acdd by Moritz Muehlenhoff at 2025-09-24T12:59:19+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -23,7 +23,7 @@ CVE-2025-8410 (Use After Free vulnerability in RTI Connext Professional (Securit
 CVE-2025-8354 (A maliciously crafted RFA file, when parsed through Autodesk Revit, ca ...)
 	NOT-FOR-US: Autodesk
 CVE-2025-7106 (danny-avila/librechat is affected by an authorization bypass vulnerabi ...)
-	TODO: check
+	NOT-FOR-US: Librechat
 CVE-2025-5717 (An authenticated remote code execution (RCE) vulnerability exists in m ...)
 	NOT-FOR-US: WSO2
 CVE-2025-59930
@@ -66,7 +66,7 @@ CVE-2025-58674 (Improper Neutralization of Input During Web Page Generation ('Cr
 CVE-2025-58473 (An improper resource shutdown or release vulnerability has been identi ...)
 	NOT-FOR-US: Click Plus devices
 CVE-2025-58354 (Kata Containers is an open source project focusing on a standard imple ...)
-	TODO: check
+	NOT-FOR-US: Kata Containers
 CVE-2025-58319 (Delta Electronics CNCSoft-G2lacks proper validation of the user-suppli ...)
 	NOT-FOR-US: Delta Electronics
 CVE-2025-58317 (Delta Electronics CNCSoft-G2lacks proper validation of the user-suppli ...)
@@ -142,7 +142,7 @@ CVE-2025-10412 (The Product Options and Price Calculation Formulas for WooCommer
 CVE-2025-10244 (A maliciously crafted HTML payload, when rendered by the Autodesk Fusi ...)
 	NOT-FOR-US: Autodesk
 CVE-2025-10184 (The vulnerability allows any application installed on the device to re ...)
-	TODO: check
+	NOT-FOR-US: Oneplus
 CVE-2025-10147 (The Podlove Podcast Publisher plugin for WordPress is vulnerable to ar ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2025-0672 (An authentication bypass vulnerability exists in multiple WSO2 product ...)
@@ -156,13 +156,13 @@ CVE-2024-6429 (A content spoofing vulnerability exists in multiple WSO2 products
 CVE-2024-4598 (An information disclosure vulnerability exists in multiple WSO2 produc ...)
 	NOT-FOR-US: WSO2
 CVE-2024-21935 (Improper input validation in Satellite Management Controller (SMC) may ...)
-	TODO: check
+	NOT-FOR-US: AMD
 CVE-2024-21927 (Improper input validation in Satellite Management Controller (SMC) may ...)
-	TODO: check
+	NOT-FOR-US: AMD
 CVE-2023-47538
 	REJECTED
 CVE-2017-20200 (A vulnerability has been found in Coinomi up to 1.7.6. This issue affe ...)
-	TODO: check
+	NOT-FOR-US: Coinomi
 CVE-2025-59825 (astral-tokio-tar is a tar archive reading/writing library for async Ru ...)
 	- rust-astral-tokio-tar <unfixed>
 	NOTE: https://github.com/advisories/GHSA-3wgq-wrwc-vqmv



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/98b0acddda3e17fc4f2dcd6edf07f174b83d7080

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/98b0acddda3e17fc4f2dcd6edf07f174b83d7080
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250924/7ef99f57/attachment.htm>