[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6651444f by Moritz Muehlenhoff at 2026-07-01T08:36:38+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1326,25 +1326,25 @@ CVE-2026-44946 (A SAML authentication replay vulnerability in Rancher's Assertio
 CVE-2026-41053 (Incorrect authentication caching in the team member ship expansion of  ...)
 	TODO: check
 CVE-2026-35098 (KTM System e-BOK does not implement any limit or timeout on consecutiv ...)
-	TODO: check
+	NOT-FOR-US: KTM System e-BOK
 CVE-2026-35097 (KTM System e-BOK enforces a maximum password length of six numeric dig ...)
-	TODO: check
+	NOT-FOR-US: KTM System e-BOK
 CVE-2026-35096 (KTM System e-BOK is vulnerable to Cross\u2011Site Request Forgery (CSR ...)
-	TODO: check
+	NOT-FOR-US: KTM System e-BOK
 CVE-2026-35095 (KTM System e-BOK allows the session identifier to be set by the client ...)
-	TODO: check
+	NOT-FOR-US: KTM System e-BOK
 CVE-2026-27957 (Coolify is an open-source and self-hostable tool for managing servers, ...)
-	TODO: check
+	NOT-FOR-US: Coolify
 CVE-2026-27956 (Coolify is an open-source and self-hostable tool for managing servers, ...)
-	TODO: check
+	NOT-FOR-US: Coolify
 CVE-2026-27955 (Coolify is an open-source and self-hostable tool for managing servers, ...)
-	TODO: check
+	NOT-FOR-US: Coolify
 CVE-2026-27883 (Coolify is an open-source and self-hostable tool for managing servers, ...)
-	TODO: check
+	NOT-FOR-US: Coolify
 CVE-2026-27882 (Coolify is an open-source and self-hostable tool for managing servers, ...)
-	TODO: check
+	NOT-FOR-US: Coolify
 CVE-2026-27881 (Coolify is an open-source and self-hostable tool for managing servers, ...)
-	TODO: check
+	NOT-FOR-US: Coolify
 CVE-2026-14241 (Memory safety bugs present in Firefox 152.0.3. Some of these bugs show ...)
 	- firefox 152.0.4-1
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-62/#CVE-2026-14241
@@ -1359,9 +1359,9 @@ CVE-2026-14161 (Hospital Quening Management developed by Advantech has a Sensiti
 CVE-2026-13474 (Denial of service via malformed HTTP/2 requests inNetScaler ADC and Ne ...)
 	NOT-FOR-US: NetScaler
 CVE-2026-13455 (PostgreSQL Anonymizer contains a vulnerability that allows unprivilege ...)
-	TODO: check
+	NOT-FOR-US: PostgreSQL Anonymizer
 CVE-2026-13316 (A flaw has been found in foreman when HTTP parameters are modified in  ...)
-	TODO: check
+	- foreman <itp> (bug #663101)
 CVE-2026-13149 (brace-expansion through 5.0.6 is vulnerable to denial of service. The  ...)
 	TODO: check
 CVE-2026-12610 (A flaw was found in sssd. When authenticating with a YubiKey, the SSSD ...)
@@ -1369,9 +1369,9 @@ CVE-2026-12610 (A flaw was found in sssd. When authenticating with a YubiKey, th
 CVE-2026-12578 (The affected product is vulnerable to a deserialization of untrusted d ...)
 	NOT-FOR-US: Delta Electronics
 CVE-2026-12388 (A flaw was found in the Identity Provider (IdP) mapper component of Ke ...)
-	TODO: check
+	- keycloak <itp> (bug #1088287)
 CVE-2026-12076 (Raytha CMS is vulnerable to SQL Injection within the OData filter pars ...)
-	TODO: check
+	NOT-FOR-US: Raytha CMS
 CVE-2026-10817 (Insufficient input validation leading to memory overread inNetScaler A ...)
 	NOT-FOR-US: NetScaler
 CVE-2026-10816 (Arbitrary File Read (Unauthenticated) inNetScaler ADC and NetScaler Ga ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6651444fb0f292bd6e7bcc682b8ef8fd83e7d75b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6651444fb0f292bd6e7bcc682b8ef8fd83e7d75b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260701/86696c68/attachment.htm>