[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f35cff90 by Salvatore Bonaccorso at 2026-07-17T14:57:13+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -144,7 +144,7 @@ CVE-2026-60073 (An out-of-bounds read in the Productivity Suite allows a physica
 CVE-2026-60063 (An out-of-bounds write vulnerability in the Productivity Suite allows  ...)
 	NOT-FOR-US: Productivity Suite
 CVE-2026-60060 (Improper Handling of Length Parameter Inconsistency (CWE-130) vulnerab ...)
-	TODO: check
+	NOT-FOR-US: Tera Term
 CVE-2026-5674 (A flaw was found in PipeWire, a multimedia server. This vulnerability  ...)
 	TODO: check
 CVE-2026-59867 (Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.32.5, ...)
@@ -166,9 +166,9 @@ CVE-2026-59860 (Kiota is an OpenAPI based HTTP Client code generator. Prior to 1
 CVE-2026-59859 (Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.32.4, ...)
 	NOT-FOR-US: Kiota
 CVE-2026-59249 (Inconsistent interpretation of HTTP requests (HTTP response smuggling) ...)
-	TODO: check
+	NOT-FOR-US: elixir-mint mint
 CVE-2026-59237 (Authorization Bypass Through User-Controlled Key (CWE-639) in the Orde ...)
-	TODO: check
+	NOT-FOR-US: Roskus Prospero Flow CRM
 CVE-2026-59117 (Integer overflow or wraparound in Windows Terminal allows an unauthori ...)
 	NOT-FOR-US: Microsoft
 CVE-2026-58643 (Improper neutralization of input during web page generation ('cross-si ...)
@@ -176,11 +176,11 @@ CVE-2026-58643 (Improper neutralization of input during web page generation ('cr
 CVE-2026-58598 (Concurrent execution using shared resource with improper synchronizati ...)
 	NOT-FOR-US: Microsoft
 CVE-2026-58317 (Unsigned to Signed Conversion Error (CWE-196) vulnerability exists in  ...)
-	TODO: check
+	NOT-FOR-US: Tera Term
 CVE-2026-58078 (The Joomla extension Quix Page Builder Pro is vulnerable to an unauthe ...)
 	NOT-FOR-US: Joomla
 CVE-2026-57896 (An out-of-bounds read vulnerability in the Productivity Suite allows a ...)
-	TODO: check
+	NOT-FOR-US: Productivity Suite
 CVE-2026-57206 (SimpleChat is a secure AI conversation application with personal and g ...)
 	TODO: check
 CVE-2026-57205 (SimpleChat is a secure AI conversation application with personal and g ...)
@@ -1019,9 +1019,9 @@ CVE-2026-60087 (PraisonAI before 1.6.78 caches tool approval decisions by tool n
 CVE-2026-60085 (PraisonAI before 4.6.78 contains an unenforced security policy vulnera ...)
 	NOT-FOR-US: PraisonAI
 CVE-2026-60065 (When NGINX Plus is configured to use the Message Queuing Telemetry Tra ...)
-	TODO: check
+	NOT-FOR-US: F5
 CVE-2026-60062 (The NGINX Agent config_dirsdirective allows a low-privileged attacker  ...)
-	TODO: check
+	NOT-FOR-US: F5
 CVE-2026-60005 (NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ ...)
 	TODO: check
 CVE-2026-59955 (Apollo is a reliable configuration management system suitable for micr ...)
@@ -5791,7 +5791,7 @@ CVE-2026-59805 (Gumroad before 2026.07.06.2 contains a broken access control vul
 CVE-2026-59804 (Midscene Bridge Server through 1.10.3, fixed in commit 86f4118, contai ...)
 	NOT-FOR-US: Midscene Bridge Server
 CVE-2026-59803 (rpcx through 1.9.3, fixed in commit 047aec1, contains a denial-of-serv ...)
-	TODO: check
+	NOT-FOR-US: rpcx
 CVE-2026-59802 (PasswordPusher before 2.8.1 accepts data URI schemes in URL push paylo ...)
 	NOT-FOR-US: PasswordPusher
 CVE-2026-59723 (Cline is an autonomous coding agent as an SDK, IDE extension, or CLI a ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f35cff90d2bbe2fb12140eb82d89e57bb676325d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f35cff90d2bbe2fb12140eb82d89e57bb676325d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260717/10f9c18a/attachment.htm>