[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8759f334 by Salvatore Bonaccorso at 2026-07-04T09:19:39+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -191,37 +191,37 @@ CVE-2026-12252 (In nltk/nltk versions 3.9.3 and earlier, five Stanford interface
 CVE-2025-71380 (The Execute Command node in n8n allows authenticated users to execute  ...)
 	TODO: check
 CVE-2025-71375 (picklescan before 0.0.34 fails to detect the _operator.methodcaller bu ...)
-	TODO: check
+	NOT-FOR-US: picklescan
 CVE-2025-71373 (picklescan before 0.0.33 fails to detect operator.methodcaller functio ...)
-	TODO: check
+	NOT-FOR-US: picklescan
 CVE-2025-71372 (Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.g ...)
-	TODO: check
+	NOT-FOR-US: picklescan
 CVE-2025-71369 (picklescan before 0.0.28 fails to detect malicious pickle files that u ...)
-	TODO: check
+	NOT-FOR-US: picklescan
 CVE-2025-71367 (picklescan before 0.0.34 fails to detect _operator.attrgetter function ...)
-	TODO: check
+	NOT-FOR-US: picklescan
 CVE-2025-71366 (picklescan before 0.0.28 fails to detect malicious torch.utils.bottlen ...)
-	TODO: check
+	NOT-FOR-US: picklescan
 CVE-2025-71364 (picklescan before 0.0.30 fails to detect the asyncio.unix_events._Unix ...)
-	TODO: check
+	NOT-FOR-US: picklescan
 CVE-2025-71362 (picklescan before 0.0.33 fails to detect unsafe deserialization when n ...)
-	TODO: check
+	NOT-FOR-US: picklescan
 CVE-2025-71360 (picklescan before 0.0.29 fails to detect malicious pickle files using  ...)
-	TODO: check
+	NOT-FOR-US: picklescan
 CVE-2025-71359 (picklescan before 0.0.29 fails to detect malicious pickle payloads tha ...)
-	TODO: check
+	NOT-FOR-US: picklescan
 CVE-2025-71356 (picklescan before 0.0.28 fails to detect malicious torch.fx.experiment ...)
-	TODO: check
+	NOT-FOR-US: picklescan
 CVE-2025-71353 (picklescan before 0.0.28 fails to detect malicious pickle files that e ...)
-	TODO: check
+	NOT-FOR-US: picklescan
 CVE-2025-71347 (picklescan before 0.0.33 fails to detect malicious pickle files using  ...)
-	TODO: check
+	NOT-FOR-US: picklescan
 CVE-2025-71345 (picklescan before 0.0.30 fails to detect malicious pickle files that i ...)
-	TODO: check
+	NOT-FOR-US: picklescan
 CVE-2025-71343 (picklescan before 0.0.30 fails to detect malicious pickle files that e ...)
-	TODO: check
+	NOT-FOR-US: picklescan
 CVE-2025-71342 (picklescan before 0.0.30 fails to detect malicious pickle files using  ...)
-	TODO: check
+	NOT-FOR-US: picklescan
 CVE-2026-12893 [gstreamer1-libav: gstreamer1-libav: NULL pointer dereference in gstavdemux.c error handler]
 	- gst-libav1.0 <undetermined>
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2491322 (not yet public)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8759f334c241e8cd94dd62c76a13913723b12c36

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8759f334c241e8cd94dd62c76a13913723b12c36
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260704/76d5e241/attachment.htm>