[Git][security-tracker-team/security-tracker][master] Process soem NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0dd9e22d by Salvatore Bonaccorso at 2026-11-04T08:32:00+01:00
Process soem NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,7 +1,7 @@
 CVE-2026-99270 (In the Linux kernel, the following vulnerability has been resolved:  t ...)
 	TODO: check
 CVE-2026-97350 (Securepoint SSL VPN Client v2 on Windows contains vulnerabilities in t ...)
-	TODO: check
+	NOT-FOR-US: Securepoint
 CVE-2026-97072 (Missing Authorization vulnerability in myCred myCred mycred allows Exp ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-95860 (node-opcua is an OPC UA implementation for TypeScript and Node.js. Fro ...)
@@ -119,9 +119,9 @@ CVE-2026-95722 (A local privilege escalation vulnerability has been discovered i
 CVE-2026-93325 (Buildx bake requires the user to grant entitlements with --allow or an ...)
 	TODO: check
 CVE-2026-92610 (In esmf-sdk-py-aspect-model-loader versions 2.1.2 to 2.2.1, the Aspect ...)
-	TODO: check
+	NOT-FOR-US: esmf-sdk-py-aspect-model-loader
 CVE-2026-92211 (Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote C ...)
-	TODO: check
+	NOT-FOR-US: Pixar Animation Studio
 CVE-2026-92200 (Quest Foglight for Databases Incorrect Permission Assignment Local Pri ...)
 	NOT-FOR-US: Quest Foglight for Databases
 CVE-2026-92199 (Quest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Lo ...)
@@ -163,11 +163,11 @@ CVE-2026-89293 (In Eclipse Mnestix Browser versions 1.2.0 up until but excluding
 CVE-2026-89292 (In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 ...)
 	TODO: check
 CVE-2026-89229 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
-	TODO: check
+	NOT-FOR-US: BlueLM Copilot
 CVE-2026-88968 (Claude Code is an agentic coding tool. Prior to 2.1.251, the Edit tool ...)
-	TODO: check
+	NOT-FOR-US: Claude Code
 CVE-2026-88066 (Claude Desktop is Anthropic's desktop application for interacting with ...)
-	TODO: check
+	NOT-FOR-US: Claude Desktop
 CVE-2026-87044 (The Mbed TLS crypto shim driver in drivers/crypto/crypto_mbedtls_shim. ...)
 	NOT-FOR-US: Zephyr, different from src:zephyr
 CVE-2026-87043 (The entropy-device random number generator in subsys/random/random_ent ...)
@@ -223,11 +223,11 @@ CVE-2026-77691 (ZohoCorp ManageEngine Key Manager Plus versions before 7151 allo
 CVE-2026-77690 (ZohoCorp ManageEngine Key Manager Plus versions before 7151 were vulne ...)
 	NOT-FOR-US: Zoho
 CVE-2026-76894 (CKAN MCP Server is a tool for querying CKAN open data portals. Prior t ...)
-	TODO: check
+	NOT-FOR-US: CKAN MCP Server
 CVE-2026-76124 (The BuddyBoss App plugin for WordPress is vulnerable to Arbitrary File ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-73328 (Volmarg Personal Management System through 2.1.0 contains an unrestric ...)
-	TODO: check
+	NOT-FOR-US: Volmarg Personal Management System
 CVE-2026-65168 (NVIDIA Slurm contains an attacker-controlled heap-based buffer overflo ...)
 	TODO: check
 CVE-2026-65160 (NVIDIA nvJPEG contains a vulnerability where an attacker could cause a ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0dd9e22d7929133e0136e32ee81aa16fe99affce

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0dd9e22d7929133e0136e32ee81aa16fe99affce
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261104/7984b401/attachment.htm>