[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7c57476e by Salvatore Bonaccorso at 2026-08-19T21:50:33+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,25 +1,25 @@
 CVE-2026-76614 (OpenEMR before 8.3.0 contains a path traversal vulnerability in the ED ...)
 	NOT-FOR-US: OpenEMR
 CVE-2026-76245 (stigmem (pip package stigmem-node) version 0.9.0a1 contains a timestam ...)
-	TODO: check
+	NOT-FOR-US: stigmem
 CVE-2026-76244 (stigmem-node contains an insecure default configuration vulnerability  ...)
-	TODO: check
+	NOT-FOR-US: stigmem-node
 CVE-2026-76243 (stigmem versions before 0.9.0a2 allow unauthenticated access when auth ...)
-	TODO: check
+	NOT-FOR-US: stigmem
 CVE-2026-76242 (stigmem-node 0.9.0a1 accepts federation peer key material during peer  ...)
-	TODO: check
+	NOT-FOR-US: stigmem-node
 CVE-2026-76241 (stigmem-node 0.9.0a1 allows plugin signature enforcement to be disable ...)
-	TODO: check
+	NOT-FOR-US: stigmem-node
 CVE-2026-76240 (stigmem-node 0.9.0a1 interpolates Postgres backend schema identifiers  ...)
-	TODO: check
+	NOT-FOR-US: stigmem-node
 CVE-2026-76239 (Stigmem before 0.9.0a11 fails to validate the delivery_address paramet ...)
-	TODO: check
+	NOT-FOR-US: stigmem
 CVE-2026-76238 (stigmem versions before 0.9.0a12 contain a broken object level authori ...)
-	TODO: check
+	NOT-FOR-US: stigmem
 CVE-2026-76237 (stigmem-node before 0.9.0a12 contains a broken object level authorizat ...)
-	TODO: check
+	NOT-FOR-US: stigmem-node
 CVE-2026-76236 (stigmem-node before 0.9.0a12 contains a cross-tenant broken object lev ...)
-	TODO: check
+	NOT-FOR-US: stigmem-node
 CVE-2026-76235 (A memory leak flaw was found in cockpit-ws. The login page handler lea ...)
 	TODO: check
 CVE-2026-76234 (libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7c57476e4ea7aebcbf0e2a1833eaba42966274ad

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7c57476e4ea7aebcbf0e2a1833eaba42966274ad
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260819/f414e226/attachment.htm>