[Git][security-tracker-team/security-tracker][master] Correct two CVEs which are for lact, itp'ed and not NFU

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9ed7798c by Salvatore Bonaccorso at 2026-08-31T16:32:06+02:00
Correct two CVEs which are for lact, itp'ed and not NFU

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -6006,9 +6006,9 @@ CVE-2026-75497 (Webkul QloApps does not validate request parameters before a dat
 CVE-2026-75496 (Webkul QloApps does not perform proper validation on uploaded file ext ...)
 	NOT-FOR-US: Webkul QloApps
 CVE-2026-75038 (UNIX symbolic link (symlink) following vulnerability in ilya-zlobintse ...)
-	NOT-FOR-US: ilya-zlobintsev/LACT
+	- lact <itp> (bug #1080425)
 CVE-2026-75037 (Polkit Authentication Based on UnixProcessSubject / Peer PID in LACT o ...)
-	NOT-FOR-US: ilya-zlobintsev/LACT
+	- lact <itp> (bug #1080425)
 CVE-2026-71564 (Substance3D - Designer is affected by an out-of-bounds write vulnerabi ...)
 	NOT-FOR-US: Adobe
 CVE-2026-71444 (CAI Content Credentials is affected by an Integer Underflow (Wrap or W ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9ed7798cf2e54831437c46865dff5bca8e51b0d4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9ed7798cf2e54831437c46865dff5bca8e51b0d4
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260831/f4a3bed4/attachment.htm>