[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Jan 27 20:56:02 GMT 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
784aba6b by Salvatore Bonaccorso at 2026-01-27T21:54:24+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -19,65 +19,65 @@ CVE-2026-24868 (Mitigation bypass in the Privacy: Anti-Tracking component. This
 CVE-2026-24858 (An Authentication Bypass Using an Alternate Path or Channel vulnerabil ...)
 	NOT-FOR-US: Fortinet
 CVE-2026-24832 (Out-of-bounds Write vulnerability in ixray-team ixray-1.6-stcop.This i ...)
-	TODO: check
+	NOT-FOR-US: ixray-1.6-stcop
 CVE-2026-24831 (Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability i ...)
-	TODO: check
+	NOT-FOR-US: ixray-1.6-stcop
 CVE-2026-24830 (Integer Overflow or Wraparound vulnerability in Ralim IronOS.This issu ...)
-	TODO: check
+	NOT-FOR-US: IronOS
 CVE-2026-24829 (Out-of-bounds Write, Heap-based Buffer Overflow vulnerability in Is-Da ...)
-	TODO: check
+	NOT-FOR-US: is-Engine
 CVE-2026-24828 (Missing Release of Memory after Effective Lifetime vulnerability in Is ...)
-	TODO: check
+	NOT-FOR-US: is-Engine
 CVE-2026-24827 (Out-of-bounds Write vulnerability in gerstrong Commander-Genius.This i ...)
-	TODO: check
+	NOT-FOR-US: Commander-Genius
 CVE-2026-24826 (Out-of-bounds Write, Divide By Zero, NULL Pointer Dereference, Use of  ...)
-	TODO: check
+	NOT-FOR-US: cadaver turso3d
 CVE-2026-24825 (Missing Release of Memory after Effective Lifetime vulnerability in yd ...)
-	TODO: check
+	NOT-FOR-US: ydb
 CVE-2026-24824 (Improper Neutralization of Input During Web Page Generation (XSS or 'C ...)
-	TODO: check
+	NOT-FOR-US: yacy_search_server
 CVE-2026-24823 (Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Clas ...)
-	TODO: check
+	NOT-FOR-US: X-TRACK
 CVE-2026-24822 (Out-of-bounds Write, Heap-based Buffer Overflow vulnerability in ttttu ...)
-	TODO: check
+	NOT-FOR-US: ttttupup wxhelper
 CVE-2026-24821 (Out-of-bounds Read vulnerability in turanszkij WickedEngine (WickedEng ...)
-	TODO: check
+	NOT-FOR-US: turanszkij WickedEngine
 CVE-2026-24820 (Out-of-bounds Read vulnerability in turanszkij WickedEngine (WickedEng ...)
-	TODO: check
+	NOT-FOR-US: turanszkij WickedEngine
 CVE-2026-24819 (Improperly Controlled Sequential Memory Allocation vulnerability in fo ...)
-	TODO: check
+	NOT-FOR-US: foxinmy weixin4j
 CVE-2026-24818 (Out-of-bounds Read vulnerability in praydog UEVR (dependencies/lua/src ...)
-	TODO: check
+	NOT-FOR-US: praydog UEVR
 CVE-2026-24817 (Out-of-bounds Write vulnerability in praydog UEVR (dependencies/lua/sr ...)
-	TODO: check
+	NOT-FOR-US: praydog UEVR
 CVE-2026-24816 (Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability i ...)
-	TODO: check
+	NOT-FOR-US: datavane tis
 CVE-2026-24815 (Unrestricted Upload of File with Dangerous Type, Deserialization of Un ...)
-	TODO: check
+	NOT-FOR-US: datavane tis
 CVE-2026-24814 (Integer Overflow or Wraparound vulnerability in swoole swoole-src (thi ...)
-	TODO: check
+	NOT-FOR-US: swoole swoole-src
 CVE-2026-24813 (NULL Pointer Dereference vulnerability in abcz316 SKRoot-linuxKernelRo ...)
-	TODO: check
+	NOT-FOR-US: abcz316 SKRoot-linuxKernelRoot
 CVE-2026-24812 (Vulnerability in root-project root (builtins/zlib modules). This vulne ...)
-	TODO: check
+	NOT-FOR-US: root-project root
 CVE-2026-24811 (Vulnerability in root-project root (builtins/zlib modules). This vulne ...)
-	TODO: check
+	NOT-FOR-US: root-project root
 CVE-2026-24810 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') ...)
 	TODO: check
 CVE-2026-24809 (An issue from the component luaG_runerror in dependencies/lua/src/ldeb ...)
-	TODO: check
+	NOT-FOR-US: praydog/REFramework
 CVE-2026-24808 (Integer Overflow or Wraparound vulnerability in RawTherapee (rtengine  ...)
 	TODO: check
 CVE-2026-24807 (Improper Verification of Cryptographic Signature vulnerability in liuy ...)
-	TODO: check
+	NOT-FOR-US: liuyueyi quick-media
 CVE-2026-24806 (Improper Control of Generation of Code ('Code Injection') vulnerabilit ...)
-	TODO: check
+	NOT-FOR-US: liuyueyi quick-media
 CVE-2026-24805 (NULL Pointer Dereference vulnerability in visualfc liteide (liteidex/s ...)
-	TODO: check
+	NOT-FOR-US: visualfc liteide
 CVE-2026-24804 (Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability i ...)
-	TODO: check
+	NOT-FOR-US: coolsnowwolf lede
 CVE-2026-24803 (Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability i ...)
-	TODO: check
+	NOT-FOR-US: coolsnowwolf lede
 CVE-2026-24802 (Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability i ...)
 	TODO: check
 CVE-2026-24801 (Vulnerability in Ralim IronOS (source/Core/BSP/Pinecilv2/bl_mcu_sdk/co ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/784aba6b96be37d84354d85a53119a81099f4288

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/784aba6b96be37d84354d85a53119a81099f4288
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260127/4cfc0197/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list