[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Jan 2 20:48:12 GMT 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fe47c1cf by Salvatore Bonaccorso at 2026-01-02T21:47:38+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1351,13 +1351,13 @@ CVE-2025-15439 (A vulnerability was identified in Daptin 0.10.3. Affected by thi
 CVE-2025-15438 (A vulnerability was determined in PluXml up to 5.8.22. Affected is the ...)
 	TODO: check
 CVE-2025-15437 (A vulnerability was found in LigeroSmart up to 6.1.24. This affects an ...)
-	TODO: check
+	NOT-FOR-US: LigeroSmart
 CVE-2025-15436 (A vulnerability has been found in Yonyou KSOA 9.0. Affected by this is ...)
-	TODO: check
+	NOT-FOR-US: Yonyou KSOA
 CVE-2025-11837 (An improper control of generation of code vulnerability has been repor ...)
 	NOT-FOR-US: QNAP
 CVE-2024-55374 (REDCap 14.3.13 allows an attacker to enumerate usernames due to an obs ...)
-	TODO: check
+	NOT-FOR-US: REDCap
 CVE-2026-21444 (libtpms, a library that provides software emulation of a Trusted Platf ...)
 	- libtpms <unfixed>
 	[trixie] - libtpms <not-affected> (Vulnerable code introduced later)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fe47c1cf02633e8ef80a9c8baf3ff3d350c3e321

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fe47c1cf02633e8ef80a9c8baf3ff3d350c3e321
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260102/71eee720/attachment.htm>


More information about the debian-security-tracker-commits mailing list