[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Jun 2 10:03:10 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a04c58b6 by Salvatore Bonaccorso at 2026-06-02T10:39:03+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -35,7 +35,7 @@ CVE-2026-3722 (The Auto Image Attributes From Filename With Bulk Updater (Add Al
 CVE-2026-3198 (MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforc ...)
 	NOT-FOR-US: mlflow
 CVE-2026-37234 (FlexRIC v2.0.0 allows a single SCTP connection to bind multiple xapp_i ...)
-	TODO: check
+	NOT-FOR-US: FlexRIC
 CVE-2026-28586 (In multiple functions of AppOpsService.java, there is a possible missi ...)
 	NOT-FOR-US: Android
 CVE-2026-28581 (In fixInitiatingUserIfNecessary of CallIntentProcessor.java, there is  ...)
@@ -47,9 +47,9 @@ CVE-2026-28578 (In multiple functions of DevicePolicyManagerService.java, there
 CVE-2026-28577 (In addWindow of WindowManagerService.java, there is a possible tapjack ...)
 	NOT-FOR-US: Android
 CVE-2026-28511 (eLabFTW is an open source electronic lab notebook. Prior to version 5. ...)
-	TODO: check
+	NOT-FOR-US: eLabFTW
 CVE-2026-25879 (Langroid is a framework for building large-language-model-powered appl ...)
-	TODO: check
+	NOT-FOR-US: Langroid
 CVE-2026-25277 (Memory corruption while using Strongbox due to buffer overflow.)
 	NOT-FOR-US: Qualcomm
 CVE-2026-25276 (Memory corruption while using Strongbox due to missing bounds check.)
@@ -61,21 +61,21 @@ CVE-2026-25259 (Memory corruption while processing multiple IOCTL command for es
 CVE-2026-25258 (Memory corruption while processing IOCTL calls for escape operations.)
 	NOT-FOR-US: Qualcomm
 CVE-2026-24782 (Kiteworks is a private data network (PDN). Prior to version 9.3.0,ulti ...)
-	TODO: check
+	NOT-FOR-US: Kiteworks
 CVE-2026-24761 (Kiteworks is a private data network (PDN). Prior to version 9.3.0, an  ...)
-	TODO: check
+	NOT-FOR-US: Kiteworks
 CVE-2026-24756 (Kiteworks is a private data network (PDN). Prior to version 9.3.0, an  ...)
-	TODO: check
+	NOT-FOR-US: Kiteworks
 CVE-2026-24755 (Kiteworks is a private data network (PDN). Prior to version 9.3.0, an  ...)
-	TODO: check
+	NOT-FOR-US: Kiteworks
 CVE-2026-24754 (Kiteworks is a private data network (PDN). Prior to version 9.3.0, a s ...)
-	TODO: check
+	NOT-FOR-US: Kiteworks
 CVE-2026-24753 (Kiteworks is a private data network (PDN). Prior to version 9.3.0, an  ...)
-	TODO: check
+	NOT-FOR-US: Kiteworks
 CVE-2026-24752 (Kiteworks is a private data network (PDN). Prior to version 9.3.0, a r ...)
-	TODO: check
+	NOT-FOR-US: Kiteworks
 CVE-2026-24751 (Kiteworks is a private data network (PDN). Prior to version 9.3.0, a r ...)
-	TODO: check
+	NOT-FOR-US: Kiteworks
 CVE-2026-24092 (Memory Corruption when processing fastboot commands to set display mod ...)
 	NOT-FOR-US: Qualcomm
 CVE-2026-24091 (Memory corruption while processing fastboot commands with improperly f ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a04c58b6ac6ce290b17187335756facf532f09f0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a04c58b6ac6ce290b17187335756facf532f09f0
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260602/bd4db924/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list