[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
67a127b4 by Moritz Muehlenhoff at 2026-11-01T21:45:36+01:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1123,7 +1123,7 @@ CVE-2026-119546 (Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 thro
 CVE-2026-119545 (Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17. ...)
 	- forgejo <itp> (bug #1058932)
 CVE-2026-119542 (A flaw was found in the Ickle query parser in Infinispan. A query cont ...)
-	TODO: check
+	NOT-FOR-US: Infinispan
 CVE-2026-119528 (A flaw was found in GIMP. The PSD plug-in\u2019s image resource header ...)
 	- gimp <unfixed> (bug #1152636)
 	NOTE: https://gitlab.gnome.org/GNOME/gimp/-/work_items/16799
@@ -1465,13 +1465,13 @@ CVE-2026-111498 (OpenManage Enterprise, versions prior to 4.8.0, contains an Imp
 CVE-2026-111487 (An out-of-bounds write vulnerability in the Qt Framework assimp scene  ...)
 	TODO: check
 CVE-2026-110972 (P\u0142atnik performs client-side authentication. An attacker with acc ...)
-	TODO: check
+	NOT-FOR-US: Platnik
 CVE-2026-110971 (Use of a weak password encoding algorithm in P\u0142atnik software all ...)
-	TODO: check
+	NOT-FOR-US: Platnik
 CVE-2026-110970 (P\u0142atnikuses HTTP protocol to downloadupdates, libraries and suppo ...)
-	TODO: check
+	NOT-FOR-US: Platnik
 CVE-2026-110799 (Vvveb is a powerful and easy to use CMS with page builder to build web ...)
-	TODO: check
+	NOT-FOR-US: Vvveb
 CVE-2026-110533 (The FV Flowplayer Video Player plugin for WordPress is vulnerable to S ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-110305 (The Advanced Custom Fields: Extended plugin for WordPress is vulnerabl ...)
@@ -1493,9 +1493,9 @@ CVE-2026-105924 (A NULL pointer dereference vulnerability in the Qt QCborValue t
 CVE-2026-105894 (The Ak Framework plugin for WordPress, included in the Newsy - Viral N ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-105456 (RTIR extends RT's HTML scrubber to allow an internal link       placeh ...)
-	TODO: check
+	NOT-FOR-US: rtir
 CVE-2026-105455 (RTIR's ticket creation forms show the subject of the related       tic ...)
-	TODO: check
+	NOT-FOR-US: rtir
 CVE-2026-105077 (Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.19 ve ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-104744 (The Independent Analytics Pro plugin for WordPress is vulnerable to St ...)
@@ -1535,7 +1535,7 @@ CVE-2026-101210 (Dell OpenManage Enterprise, versions prior to 4.8.0, contains a
 CVE-2026-101209 (Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Server ...)
 	NOT-FOR-US: Dell / EMC
 CVE-2026-100355 (Campfire is a web-based chat application. In version 1.4.4 and earlier ...)
-	TODO: check
+	NOT-FOR-US: Campfire
 CVE-2025-8574 (The Database Cleaner plugin for WordPress is vulnerable to arbitrary t ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2025-68395 (ARKETEAM Protectel modules PROTECTELMAJ and BDF  contain a note editor ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/67a127b4071a05b6d83466d5eac95db8c3005a64

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/67a127b4071a05b6d83466d5eac95db8c3005a64
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261101/94a1c9c8/attachment-0001.htm>