[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c32ed26d by Salvatore Bonaccorso at 2026-08-27T10:57:51+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -114,31 +114,31 @@ CVE-2026-71172 (Dell Cloud Disaster Recovery, versions20.2 and prior,containa Se
 CVE-2026-71054 (Vulnerability in Oracle Java SE (component: 2D).  Supported versions t ...)
 	TODO: check
 CVE-2026-69129 (KubePi is a Kubernetes multi-cluster management panel. In versions up  ...)
-	TODO: check
+	NOT-FOR-US: KubePi
 CVE-2026-68863 (Dell PowerProtect One, versions 20.1.0.0 and below, contain a Stack-ba ...)
 	NOT-FOR-US: Dell / EMC
 CVE-2026-68861 (Dell PowerProtect One, versions 20.1.0.0 and below, contain an Imprope ...)
 	NOT-FOR-US: Dell / EMC
 CVE-2026-68000 (The front-end interface /cms/category/list of MCMS <=6.2.0 is vulnerab ...)
-	TODO: check
+	NOT-FOR-US: MCMS
 CVE-2026-67275 (Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance ...)
 	NOT-FOR-US: Dell / EMC
 CVE-2026-66003 (Frappe is a full-stack web application framework written in Python and ...)
-	TODO: check
+	NOT-FOR-US: Frappe
 CVE-2026-65956 (KubePi is a Kubernetes multi-cluster management panel. In versions up  ...)
-	TODO: check
+	NOT-FOR-US: KubePi
 CVE-2026-65930 (LimeSurvey Community Edition 7.0.5 contains an authenticated stored cr ...)
 	TODO: check
 CVE-2026-65647 (Improper symlink resolution before file access in Plesk allows remote  ...)
-	TODO: check
+	NOT-FOR-US: Plesk
 CVE-2026-65646 (Improper neutralization of special elements in Plesk allows remote aut ...)
-	TODO: check
+	NOT-FOR-US: Plesk
 CVE-2026-65642 (Insecure direct object reference in Plesk 18.0.79.7 and earlier or 18. ...)
-	TODO: check
+	NOT-FOR-US: Plesk
 CVE-2026-65641 (A vulnerability allowing an unauthenticated network attacker to coerce ...)
-	TODO: check
+	NOT-FOR-US: Veeam
 CVE-2026-64632 (A vulnerability allowing a low-privileged user to capture the NTLM cre ...)
-	TODO: check
+	NOT-FOR-US: Veeam
 CVE-2026-63360 (LimeSurvey Community Edition 7.0.5+260623 contains an authenticated re ...)
 	TODO: check
 CVE-2026-62326 (Weblate is a web-based continuous localization platform used to manage ...)
@@ -150,9 +150,9 @@ CVE-2026-61792 (Weblate is a web-based continuous localization platform used to
 CVE-2026-61790 (Weblate is a web-based continuous localization platform used to manage ...)
 	- weblate <itp> (bug #745661)
 CVE-2026-61617 (Wings is the server control plane for the Pterodactyl game-server mana ...)
-	TODO: check
+	NOT-FOR-US: Wings
 CVE-2026-60004 (Gitea before 1.27.1 allows remote code execution via the diffpatch API ...)
-	TODO: check
+	NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
 CVE-2026-59278 (JsonKafkaHeaderMapper and DefaultKafkaHeaderMapper include java.net in ...)
 	NOT-FOR-US: VMware
 CVE-2026-59275 (A single hostile AMQP message can terminate the entire consumer JVM (S ...)
@@ -164,7 +164,7 @@ CVE-2026-59271 (When the RabbitMQ management aliveness check fails, the configur
 CVE-2026-59270 (Spring Security's embedded UnboundID LDAP server (UnboundIdContainer)  ...)
 	TODO: check
 CVE-2026-58070 (A vulnerability that records guest OS processing credentials in cleart ...)
-	TODO: check
+	NOT-FOR-US: Veeam
 CVE-2026-56547 (The Apple profile generated for the Apple built-in Mail, Calendar and  ...)
 	NOT-FOR-US: HCL
 CVE-2026-55228 (Weblate is a web-based continuous localization platform used to manage ...)
@@ -172,13 +172,13 @@ CVE-2026-55228 (Weblate is a web-based continuous localization platform used to
 CVE-2026-55227 (Weblate is a web-based localization tool. In versions prior to 2026.7, ...)
 	- weblate <itp> (bug #745661)
 CVE-2026-55182 (LibreNMS is a network monitoring system. In versions from 21.6.0 up to ...)
-	TODO: check
+	NOT-FOR-US: LibreNMS
 CVE-2026-54245 (Fleet is an open-source device management platform built on osquery. I ...)
-	TODO: check
+	NOT-FOR-US: Fleet
 CVE-2026-52473 (An issue in Wgcloud 3.6.4 allows a remote attacker to escalate privile ...)
-	TODO: check
+	NOT-FOR-US: Wgcloud
 CVE-2026-52103 (A zero-click remote code execution (RCE) vulnerability in the /Termina ...)
-	TODO: check
+	NOT-FOR-US: SimpleX Chat
 CVE-2026-49809 (Dell PowerProtect Cyber Recovery, versions 20.2 and prior, contain an  ...)
 	NOT-FOR-US: Dell / EMC
 CVE-2026-47894 (Spring Cloud Config Server native environment repository allows exposu ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c32ed26dd73b77ad9e8642fde73c3792d544bead

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c32ed26dd73b77ad9e8642fde73c3792d544bead
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260827/8f5624fd/attachment.htm>