[Git][security-tracker-team/security-tracker][master] Cleanup several rejected CVEs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bafda488 by Salvatore Bonaccorso at 2026-07-31T21:38:19+02:00
Cleanup several rejected CVEs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -692,25 +692,18 @@ CVE-2026-53431 (Authentication Bypass by Capture-replay vulnerability in malach-
 	NOT-FOR-US: malach-it Boruta
 CVE-2026-51295
 	REJECTED
-	TODO: check
 CVE-2026-51294
 	REJECTED
-	TODO: check
 CVE-2026-51293
 	REJECTED
-	TODO: check
 CVE-2026-51292
 	REJECTED
-	TODO: check
 CVE-2026-51291
 	REJECTED
-	TODO: check
 CVE-2026-51290
 	REJECTED
-	TODO: check
 CVE-2026-51272
 	REJECTED
-	NOT-FOR-US: schreibfaul1 ESP32-audioI2S
 CVE-2026-4978 (Improper neutralization of special elements used in an SQL command ('S ...)
 	NOT-FOR-US: Traffic Analysis System
 CVE-2026-48910 (A carefully crafted editing request could trigger an XSS vulnerability ...)
@@ -3288,52 +3281,36 @@ CVE-2026-54332 (gopacket provides packet processing capabilities for Go. In vers
 	NOTE: Fixed by: https://github.com/gopacket/gopacket/commit/76119086f5936aacd7088bdf97d565501bb6c4cc (v1.6.1)
 CVE-2026-51275
 	REJECTED
-	NOT-FOR-US: schreibfaul1 ESP32-audioI2S
 CVE-2026-51274
 	REJECTED
-	NOT-FOR-US: schreibfaul1 ESP32-audioI2S
 CVE-2026-51273
 	REJECTED
-	NOT-FOR-US: schreibfaul1 ESP32-audioI2S
 CVE-2026-51271
 	REJECTED
-	NOT-FOR-US: schreibfaul1 ESP32-audioI2S
 CVE-2026-51270
 	REJECTED
-	NOT-FOR-US: schreibfaul1 ESP32-audioI2S
 CVE-2026-51269
 	REJECTED
-	NOT-FOR-US: schreibfaul1 ESP32-audioI2S
 CVE-2026-51268
 	REJECTED
-	NOT-FOR-US: schreibfaul1 ESP32-audioI2S
 CVE-2026-51267
 	REJECTED
-	NOT-FOR-US: schreibfaul1 ESP32-audioI2S
 CVE-2026-51266
 	REJECTED
-	NOT-FOR-US: schreibfaul1 ESP32-audioI2S
 CVE-2026-51263
 	REJECTED
-	NOT-FOR-US: schreibfaul1 ESP32-audioI2S
 CVE-2026-51261
 	REJECTED
-	NOT-FOR-US: schreibfaul1 ESP32-audioI2S
 CVE-2026-51260
 	REJECTED
-	NOT-FOR-US: schreibfaul1 ESP32-audioI2S
 CVE-2026-51259
 	REJECTED
-	NOT-FOR-US: schreibfaul1 ESP32-audioI2S
 CVE-2026-51254
 	REJECTED
-	NOT-FOR-US: schreibfaul1 ESP32-audioI2S
 CVE-2026-51252
 	REJECTED
-	NOT-FOR-US: schreibfaul1 ESP32-audioI2S
 CVE-2026-51251
 	REJECTED
-	NOT-FOR-US: schreibfaul1 ESP32-audioI2S
 CVE-2026-50738 (A use-after-free condition exists in pglogical's worker signaling code ...)
 	- pglogical 2.4.8-1
 	NOTE: https://github.com/2ndQuadrant/pglogical/releases/tag/REL2_4_8
@@ -4378,31 +4355,22 @@ CVE-2026-54272 (ip-address is a library for parsing and manipulating IPv4 and IP
 	NOTE: Address6 in 10.2.0.
 CVE-2026-51304
 	REJECTED
-	TODO: check
 CVE-2026-51303
 	REJECTED
-	TODO: check
 CVE-2026-51302
 	REJECTED
-	TODO: check
 CVE-2026-51300
 	REJECTED
-	TODO: check
 CVE-2026-51298
 	REJECTED
-	TODO: check
 CVE-2026-51297
 	REJECTED
-	TODO: check
 CVE-2026-51296
 	REJECTED
-	TODO: check
 CVE-2026-51244
 	REJECTED
-	NOT-FOR-US: schreibfaul1 ESP32-audioI2S
 CVE-2026-51235
 	REJECTED
-	TODO: check
 CVE-2026-49158 (Improper Handling of Highly Compressed Data (Data Amplification) vulne ...)
 	- thrift <unfixed>
 	NOTE: https://lists.apache.org/thread/fmjl8l415tj9zwlob8v2dr5hq1d0hts7
@@ -41312,7 +41280,6 @@ CVE-2026-6976 (GitLab has remediated an issue in GitLab CE/EE affecting all vers
 	- gitlab <removed>
 CVE-2026-6552
 	REJECTED
-	- gitlab <not-affected> (Only affects Gitlab EE)
 CVE-2026-6338 (A HTTP request smuggling and desynchronization vulnerability affects K ...)
 	NOT-FOR-US: Kong Gateway Enterprise
 CVE-2026-6277 (GitLab has remediated an issue in GitLab EE affecting all versions fro ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bafda4887ca1e5f6cfc4cf33b26437e929c3d39d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bafda4887ca1e5f6cfc4cf33b26437e929c3d39d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260731/2f0bddd1/attachment.htm>