[Git][security-tracker-team/security-tracker][master] Process some more NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
89980d34 by Salvatore Bonaccorso at 2026-06-23T09:50:19+02:00
Process some more NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -107,19 +107,19 @@ CVE-2026-48509 (MessagePack for C# is a MessagePack serializer for C#. Prior to
 CVE-2026-48506 (MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.30 ...)
 	TODO: check
 CVE-2026-48505 (Filament is a collection of full-stack components for accelerated Lara ...)
-	TODO: check
+	NOT-FOR-US: Filament
 CVE-2026-48502 (MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.30 ...)
 	TODO: check
 CVE-2026-48500 (Filament is a collection of full-stack components for accelerated Lara ...)
-	TODO: check
+	NOT-FOR-US: Filament
 CVE-2026-48167 (Filament is a collection of full-stack components for accelerated Lara ...)
-	TODO: check
+	NOT-FOR-US: Filament
 CVE-2026-48166 (Filament is a collection of full-stack components for accelerated Lara ...)
-	TODO: check
+	NOT-FOR-US: Filament
 CVE-2026-48109 (MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.30 ...)
 	TODO: check
 CVE-2026-48067 (Filament is a collection of full-stack components for accelerated Lara ...)
-	TODO: check
+	NOT-FOR-US: Filament
 CVE-2026-47242 (Net::IMAP implements Internet Message Access Protocol (IMAP) client fu ...)
 	TODO: check
 CVE-2026-47241 (Net::IMAP implements Internet Message Access Protocol (IMAP) client fu ...)
@@ -163,11 +163,11 @@ CVE-2026-10651 (A malformed Bluetooth Classic SDP attribute can trigger a reacha
 CVE-2026-10645 (Zephyr's ext2 directory-entry parser does not fully validate on-disk d ...)
 	NOT-FOR-US: Zephyr, different from src:zephyr
 CVE-2025-71358 (picklescan before 0.0.29 fails to detect malicious pickle files that e ...)
-	TODO: check
+	NOT-FOR-US: picklescan
 CVE-2025-71344 (picklescan before 0.0.30 (affected versions 0.0.26 and earlier) fails  ...)
-	TODO: check
+	NOT-FOR-US: picklescan
 CVE-2025-71339 (Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran._ ...)
-	TODO: check
+	NOT-FOR-US: picklescan
 CVE-2026-9733
 	NOT-FOR-US: Mojolicious::Plugin::Web::Auth::OAuth2 Perl module
 CVE-2026-9610 (IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/89980d345f745ed5d162b8a862a68268103314ed

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/89980d345f745ed5d162b8a862a68268103314ed
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260623/4bd01251/attachment.htm>