[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
68a5605e by security tracker role at 2026-04-25T07:13:54+00:00
automatic NOT-FOR-US entries update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,9 +1,9 @@
 CVE-2026-6968 (Incomplete path traversal fixes in awslabs/tough before tough-v0.22.0  ...)
-	TODO: check
+	NOT-FOR-US: Amazon
 CVE-2026-6967 (Missing expiration, hash, and length enforcement in delegated metadata ...)
-	TODO: check
+	NOT-FOR-US: Amazon
 CVE-2026-6966 (Improper verification of cryptographic signature uniqueness in delegat ...)
-	TODO: check
+	NOT-FOR-US: Amazon
 CVE-2026-6951 (Versions of the package simple-git before 3.36.0 are vulnerable to Rem ...)
 	TODO: check
 CVE-2026-6175



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/68a5605e3345efab0f33cf4d1e4fb0ee691483ae

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/68a5605e3345efab0f33cf4d1e4fb0ee691483ae
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260425/397b9fef/attachment.htm>