[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6ca2d4ca by Moritz Muehlenhoff at 2026-06-26T10:47:36+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -142,9 +142,9 @@ CVE-2026-2299 (The Mattermost Google Drive plugin before version 1.1.0 fails to
 CVE-2026-22879 (vtk vtk-dicom vtkDICOMItem::NewDataElement heap-based buffer overflow  ...)
 	TODO: check
 CVE-2026-13322 (A flaw was found in KubeVirt's downward metrics virtio-serial server.  ...)
-	TODO: check
+	NOT-FOR-US: KubeVirt
 CVE-2026-13318 (A server-side request forgery (SSRF) flaw was found in KubeVirt's virt ...)
-	TODO: check
+	NOT-FOR-US: KubeVirt
 CVE-2026-13283 (Use after free in AdFilter in Google Chrome on Android prior to 149.0. ...)
 	TODO: check
 CVE-2026-13282 (Use after free in Payments in Google Chrome on Android prior to 149.0. ...)
@@ -154,21 +154,21 @@ CVE-2026-13281 (Integer overflow in Mojo in Google Chrome prior to 149.0.7827.20
 CVE-2026-13226 (The Groundhogg \u2014 CRM, Newsletters, and Marketing Automation plugi ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-13218 (A flaw was found in KubeVirt's virt-handler network cache handling. Th ...)
-	TODO: check
+	NOT-FOR-US: KubeVirt
 CVE-2026-13083 (A flaw was found in the Pen Drive report generator. Cluster-sourced da ...)
-	TODO: check
+	NOT-FOR-US: Red Hat Pen Drive
 CVE-2026-12993 (A flaw was found in Apicurio Registry. The DocumentBuilderAccessor cor ...)
-	TODO: check
+	NOT-FOR-US: Apicurio Registry
 CVE-2026-12992 (A flaw was found in Apicurio Registry. The WSDLReaderAccessor creates  ...)
-	TODO: check
+	NOT-FOR-US: Apicurio Registry
 CVE-2026-12975 (A flaw was found in Apicurio Registry. The ContentTypeUtil.isParsableX ...)
-	TODO: check
+	NOT-FOR-US: Apicurio Registry
 CVE-2026-12473 (Two data sources (DICOMWebProxy and DICOMJSON) shipped in the default  ...)
 	TODO: check
 CVE-2026-12340 (Out-of-bounds heap read during SM2/SM3 certificate signature verificat ...)
 	TODO: check
 CVE-2026-11800 (A flaw was found in Keycloak. This JWT algorithm confusion vulnerabili ...)
-	TODO: check
+	- keycloak <itp> (bug #1088287)
 CVE-2026-11703 (Missing SNI/ALPN binding on stateful (session-ID) resumption, which pr ...)
 	TODO: check
 CVE-2026-11310 (X.509 trust-chain bypass in the OpenSSL compatibility certificate veri ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6ca2d4ca06cc5e388d7ff4ba32692087db201c1e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6ca2d4ca06cc5e388d7ff4ba32692087db201c1e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260626/e4a87ce5/attachment.htm>