[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ac566972 by Moritz Muehlenhoff at 2026-11-01T23:22:32+01:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -8072,7 +8072,8 @@ CVE-2026-116741 (Speex (libspeex) through 1.2.1 contains an out-of-bounds write
 	- speex <unfixed>
 	NOTE: https://github.com/xiph/speex/issues/42
 CVE-2026-116740 (libcss through 0.9.2 contains a NULL pointer dereference vulnerability ...)
-	TODO: check
+	NOT-FOR-US: libcss
+	NOTE: netsurf bundles a copy, but not security impact
 CVE-2026-116739 (VMime through 0.9.2 contains an information disclosure vulnerability i ...)
 	- libvmime <unfixed>
 	NOTE: https://github.com/kisli/vmime/pull/363
@@ -8088,9 +8089,9 @@ CVE-2026-116736 (Libpff through 20260926 contains a heap out-of-bounds read vuln
 CVE-2026-116735 (libpff through 20260926 contains an off-by-one bounds check in libpff_ ...)
 	TODO: check
 CVE-2026-116734 (flatcc through 0.6.4 contains an integer overflow vulnerability in the ...)
-	TODO: check
+	NOT-FOR-US: flatcc
 CVE-2026-116733 (flatcc through 0.6.4 contains an out-of-bounds read vulnerability in _ ...)
-	TODO: check
+	NOT-FOR-US: flatcc
 CVE-2026-116732 (libdwarf through 2.3.3 contains a heap out-of-bounds read vulnerabilit ...)
 	- dwarfutils <unfixed> (unimportant)
 	NOTE: https://github.com/davea42/libdwarf-code/issues/336



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ac566972b21cf1e9c0119cc90284c4fc4c7dc1ce

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ac566972b21cf1e9c0119cc90284c4fc4c7dc1ce
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261101/12698a3c/attachment.htm>