[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d9ac8f6f by Moritz Muehlenhoff at 2026-11-04T12:26:29+01:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,5 @@
+CVE-2026-120420
+	NOT-FOR-US: drools-drl-parser
 CVE-2026-54883
 	- ofono <unfixed>
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2489133
@@ -262,7 +264,7 @@ CVE-2026-65168 (NVIDIA Slurm contains an attacker-controlled heap-based buffer o
 CVE-2026-65160 (NVIDIA nvJPEG contains a vulnerability where an attacker could cause a ...)
 	TODO: check
 CVE-2026-64672 (Terragrunt is a flexible orchestration tool that allows Infrastructure ...)
-	TODO: check
+	NOT-FOR-US: Terragrunt
 CVE-2026-63502 (Yeti bridges the gap between CTI and DFIR practitioners by providing a ...)
 	NOT-FOR-US: Yeti
 CVE-2026-63501 (ag-psd is a JavaScript library for reading and writing Photoshop Docum ...)
@@ -270,7 +272,7 @@ CVE-2026-63501 (ag-psd is a JavaScript library for reading and writing Photoshop
 CVE-2026-63500 (Yeti bridges the gap between CTI and DFIR practitioners by providing a ...)
 	NOT-FOR-US: Yeti
 CVE-2026-63499 (zt-zip is a Java library that provides convenience methods for ZIP arc ...)
-	TODO: check
+	NOT-FOR-US: zt-zip
 CVE-2026-63494
 	REJECTED
 CVE-2026-63492
@@ -286,17 +288,17 @@ CVE-2026-63476 (isomorphic-git is a pure JavaScript implementation of Git for No
 CVE-2026-63475 (isomorphic-git is a pure JavaScript implementation of Git for Node.js  ...)
 	NOT-FOR-US: isomorphic-git
 CVE-2026-63471 (fastapi-code-generator creates FastAPI applications from OpenAPI files ...)
-	TODO: check
+	NOT-FOR-US: fastapi-code-generator
 CVE-2026-63470 (fastapi-code-generator creates FastAPI applications from OpenAPI files ...)
-	TODO: check
+	NOT-FOR-US: fastapi-code-generator
 CVE-2026-63469 (fastapi-code-generator creates FastAPI applications from OpenAPI files ...)
-	TODO: check
+	NOT-FOR-US: fastapi-code-generator
 CVE-2026-63436 (zt-zip is a Java library that provides convenience methods for ZIP arc ...)
-	TODO: check
+	NOT-FOR-US: zt-zip
 CVE-2026-63434 (MyTube is a self-hosted downloader and player for several video websit ...)
-	TODO: check
+	NOT-FOR-US: MyTube
 CVE-2026-63433 (MyTube is a self-hosted downloader and player for several video websit ...)
-	TODO: check
+	NOT-FOR-US: MyTube
 CVE-2026-63418 (Monitoring Plugins is a suite of plugins for monitoring applications.  ...)
 	TODO: check
 CVE-2026-63417 (Logging Redactor is a Python library designed to redact sensitive data ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d9ac8f6ffbc34635c116b77777d70c811e8746d0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d9ac8f6ffbc34635c116b77777d70c811e8746d0
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261104/3af0c874/attachment-0001.htm>