[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bb146297 by Salvatore Bonaccorso at 2026-08-22T21:56:07+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -41,9 +41,9 @@ CVE-2026-76596 (Joomla Extension - fabrikar.com - Unauthenticated table truncati
 CVE-2026-76571 (Joomla Extension - fabrikar.com - Unauthenticated SQL injection in lis ...)
 	NOT-FOR-US: Joomla
 CVE-2026-75870 (Punk versions before 0.18 for Perl allow session cookie forgery via an ...)
-	TODO: check
+	NOT-FOR-US: Punk
 CVE-2026-75866 (Punk::OAuth2::Server versions through 0.03 for Perl issue access token ...)
-	TODO: check
+	NOT-FOR-US: Punk::OAuth2::Server Perl module
 CVE-2026-71514 (NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in C ...)
 	- nltk 3.10.3-1
 	NOTE: Fixed by: https://github.com/nltk/nltk/commit/10d34b3f4fe3fec74b76527a409eb0acbac2e8ab (v3.10.3-rc1)
@@ -104,9 +104,9 @@ CVE-2026-62383 (nltk versions before 3.10.2 contain a symlink-based arbitrary fi
 	- nltk 3.10.3-1
 	NOTE: https://github.com/nltk/nltk/security/advisories/GHSA-3hhw-38pf-pxj6
 CVE-2026-62382 (PasswordPusher versions v1.45.11 through v2.9.5 contain an improper au ...)
-	TODO: check
+	NOT-FOR-US: PasswordPusher
 CVE-2026-62381 (luci-lib-px5g (LuCI) contains a heap-based buffer overflow in the nati ...)
-	TODO: check
+	NOT-FOR-US: luci-lib-px5g (LuCI)
 CVE-2026-62380 (Netty (io.netty:netty-codec-socks) versions 4.2.0.Final through 4.2.16 ...)
 	TODO: check
 CVE-2026-62243 (Netty (io.netty:netty-handler) versions from 4.2.0.Final through 4.2.1 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bb146297bc06997d9bd5e860f4c01f4c3799658f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bb146297bc06997d9bd5e860f4c01f4c3799658f
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260822/6dc1873b/attachment.htm>