[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed May 6 07:56:45 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6789ffb1 by Salvatore Bonaccorso at 2026-05-06T08:56:06+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -144,19 +144,19 @@ CVE-2026-29168 (Allocation of Resources Without Limits or Throttling vulnerabili
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-29168
 	NOTE: https://github.com/apache/httpd/commit/5b1edb79aa2d0f8e4424de64879c46c1942e460a (2.4.67-rc1-candidate)
 CVE-2026-28510 (eLabFTW is an open source electronic lab notebook. In elabftw versions ...)
-	TODO: check
+	NOT-FOR-US: eLabFTW
 CVE-2026-27960 (OpenCTI is an open source platform for managing cyber threat intellige ...)
-	TODO: check
+	NOT-FOR-US: OpenCTI
 CVE-2026-27694 (Traccar is an open source GPS tracking system. In org.traccar:traccar  ...)
-	TODO: check
+	NOT-FOR-US: Traccar
 CVE-2026-27693 (Traccar is an open source GPS tracking system. In org.traccar:traccar  ...)
-	TODO: check
+	NOT-FOR-US: Traccar
 CVE-2026-27644 (Traccar is an open source GPS tracking system. In versions between 6.1 ...)
-	TODO: check
+	NOT-FOR-US: Traccar
 CVE-2026-25589 (RedisBloom is a probabilistic data structures module for Redis. In all ...)
-	TODO: check
+	NOT-FOR-US: RedisBloom
 CVE-2026-25588 (RedisTimeSeries is a time-series module for Redis. In all versions bef ...)
-	TODO: check
+	NOT-FOR-US: RedisTimeSeries Redis module
 CVE-2026-25243 (Redis is an in-memory data structure store. In versions of redis-serve ...)
 	TODO: check
 CVE-2026-23631 (Redis is an in-memory data structure store. In all versions of redis-s ...)
@@ -164,23 +164,23 @@ CVE-2026-23631 (Redis is an in-memory data structure store. In all versions of r
 CVE-2026-23479 (Redis is an in-memory data structure store. In redis-server from 7.2.0 ...)
 	TODO: check
 CVE-2025-66369 (An issue was discovered in MM in Samsung Mobile Processor, Wearable Pr ...)
-	TODO: check
+	NOT-FOR-US: Samsung
 CVE-2025-61669 (Jupyter Server is the backend for Jupyter web applications. In jupyter ...)
 	TODO: check
 CVE-2025-52206 (ISPConfig 3.3.0 is vulnerable to Cross Site Scripting (XSS) via the sy ...)
-	TODO: check
+	NOT-FOR-US: ISPConfig
 CVE-2025-42611 (RouterOS provides various services that rely on correct verification o ...)
-	TODO: check
+	NOT-FOR-US: RouterOS
 CVE-2023-54349 (AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: AmazCart CMS
 CVE-2023-54348 (ERPGo SaaS 3.9 contains a CSV injection vulnerability that allows auth ...)
-	TODO: check
+	NOT-FOR-US: ERPGo SaaS
 CVE-2023-54347 (OpenEMR 7.0.1 contains an authentication brute force vulnerability tha ...)
 	NOT-FOR-US: OpenEMR
 CVE-2023-54346 (WordPress Plugin Backup Migration 1.2.8 contains an information disclo ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-54345 (Frappe Framework ERPNext 13.4.0 contains a sandbox escape vulnerabilit ...)
-	TODO: check
+	NOT-FOR-US: Frappe Framework ERPNext
 CVE-2023-54344 (Eclipse Equinox OSGi 3.7.2 and earlier contains a remote code executio ...)
 	TODO: check
 CVE-2023-54342 (Eclipse Equinox OSGi versions 3.8 through 3.18 contain a remote code e ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6789ffb14545e2b6fd7226d85e8669cab1577ee4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6789ffb14545e2b6fd7226d85e8669cab1577ee4
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260506/6f5bf129/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list