[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b05b0652 by Salvatore Bonaccorso at 2026-02-11T09:45:29+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -57,9 +57,9 @@ CVE-2025-14541 (The Lucky Wheel Giveaway plugin for WordPress is vulnerable to R
 CVE-2025-13431 (The SlimStat Analytics plugin for WordPress is vulnerable to time-base ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2025-12699 (The ZOLL ePCR IOS application reflects unsanitized user input into a W ...)
-	TODO: check
+	NOT-FOR-US: ZOLL ePCR IOS
 CVE-2025-10912 (Authorization Bypass Through User-Controlled Key vulnerability in Saas ...)
-	TODO: check
+	NOT-FOR-US: TemizlikYolda
 CVE-2026-2272 [ICO import integer overflow bypass leads to heap buffer overflow]
 	- gimp <unfixed>
 	NOTE: https://gitlab.gnome.org/GNOME/gimp/-/issues/15617
@@ -531,7 +531,7 @@ CVE-2025-20080 (Null pointer dereference in the firmware for some Intel(R) AMT a
 CVE-2025-20070 (Improper conditions check for the Intel(R) Optane(TM) PMem management  ...)
 	TODO: check
 CVE-2025-15572 (A vulnerability has been found in wasm3 up to 0.5.0. The affected elem ...)
-	TODO: check
+	NOT-FOR-US: wasm3
 CVE-2025-15571 (A security vulnerability has been detected in ckolivas lrzip up to 0.6 ...)
 	TODO: check
 CVE-2025-15570 (A vulnerability was found in ckolivas lrzip up to 0.651. This impacts  ...)
@@ -541,7 +541,7 @@ CVE-2025-15569 (A flaw has been found in Artifex MuPDF up to 1.26.1 on Windows.
 CVE-2025-14895 (The PopupKit plugin for WordPress is vulnerable to authorization bypas ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2025-11242 (Server-Side Request Forgery (SSRF) vulnerability in Teknolist Computer ...)
-	TODO: check
+	NOT-FOR-US: Okulistik
 CVE-2025-11004 (The Simplicity Device Manager Tool has a Reflected XSS (Cross-site-scr ...)
 	NOT-FOR-US: Silicon Labs
 CVE-2025-0031 (A use after free in the SEV firmware could allow a malicous hypervisor ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b05b065275444846e0c5f77b51d00a65a66dbf97

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b05b065275444846e0c5f77b51d00a65a66dbf97
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260211/01fea3b7/attachment.htm>