[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f2396887 by Moritz Muehlenhoff at 2026-11-04T20:31:15+01:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2553,15 +2553,15 @@ CVE-2026-117518 (@fastify/reply-from is a Fastify plugin that forwards requests
 CVE-2026-117127 (Directory Traversal vulnerability in Gleez GleezCMS v.1.2.0 allows a r ...)
 	NOT-FOR-US: GleezCMS
 CVE-2026-117082 (An authentication bypass vulnerability in the Universal Plug and Play  ...)
-	TODO: check
+	NOT-FOR-US: Serrcom
 CVE-2026-117069 (An integer truncation vulnerability in the NAS decoder of OpenAirInter ...)
-	TODO: check
+	NOT-FOR-US: OpenAirInterface
 CVE-2026-117068 (An integer underflow vulnerability in the NAS decoder of OpenAirInterf ...)
-	TODO: check
+	NOT-FOR-US: OpenAirInterface
 CVE-2026-117067 (An out-of-bounds memory access vulnerability in the N2 SCTP interface  ...)
-	TODO: check
+	NOT-FOR-US: OpenAirInterface
 CVE-2026-116958 (A flaw was found in konflux-ci. This vulnerability allows arbitrary co ...)
-	TODO: check
+	NOT-FOR-US: konflux-ci
 CVE-2026-116769 (CVE-2026-116769 is an authentication bypass vulnerability in Secure Ac ...)
 	NOT-FOR-US: Absolute Software
 CVE-2026-116768 (CVE-2026-116768 is a missing length validation vulnerability in Secure ...)
@@ -2573,7 +2573,7 @@ CVE-2026-116766 (CVE-2026-116766 is an improper input handling vulnerability in
 CVE-2026-116635 (Improper limitation of a pathname to a restricted directory in the dep ...)
 	NOT-FOR-US: Amazon
 CVE-2026-116606 (An authentication bypass in Barracuda Email Security Gateway versions  ...)
-	TODO: check
+	NOT-FOR-US: Barracuda
 CVE-2026-115654 (In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Man ...)
 	NOT-FOR-US: Eclipse
 CVE-2026-115653 (In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the PendSV han ...)
@@ -2617,11 +2617,11 @@ CVE-2026-107457 (A memory corruption vulnerability in the QMqttClient class of t
 CVE-2026-107441 (An out-of-bounds write vulnerability in the CGI program of Zyxel GS190 ...)
 	NOT-FOR-US: Zyxel
 CVE-2026-106808 (OpenAirInterface Core Network v2.2.1 has a stack-based buffer overflow ...)
-	TODO: check
+	NOT-FOR-US: OpenAirInterface
 CVE-2026-106807 (A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP ...)
-	TODO: check
+	- open5gs <itp> (bug #1094791)
 CVE-2026-106806 (A memory exhaustion issue exists in Open5GS v2.8.0 in the HTTP/2 SBI s ...)
-	TODO: check
+	- open5gs <itp> (bug #1094791)
 CVE-2026-106805 (A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Sessi ...)
 	NOT-FOR-US: Free5GC
 CVE-2026-106804 (A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in  ...)
@@ -2635,7 +2635,7 @@ CVE-2026-105993 (The DT Directory Lite Addon WordPress plugin through 1.1 does n
 CVE-2026-105967 (The Gallery for Social Photo WordPress plugin through 1.0.0.41 does no ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-105770 (Octo STS (github.com/octo-sts/app) before 0.11.2 returns trust policy  ...)
-	TODO: check
+	NOT-FOR-US: Octo STS
 CVE-2026-105769 (kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access  ...)
 	TODO: check
 CVE-2026-105606 (Joomla Extension - joomlaboat.com - Unauthenticated arbitrary file upl ...)
@@ -6804,7 +6804,7 @@ CVE-2026-117548 (A NULL pointer dereference flaw was found in 389-ds-base. This
 	- 389-ds-base <unfixed>
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2561778
 CVE-2026-116641 (The DB Tools rely on the TLS implementation in Golang\u2019s standard  ...)
-	TODO: check
+	- mongo-tools <removed>
 CVE-2026-115415 (Improper neutralization of input used for LLM prompting in the environ ...)
 	NOT-FOR-US: Amazon
 CVE-2026-115302 (The Contact Form by Supsystic  WordPress plugin before 1.11.1 does not ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f23968870545dacc8c810a3677e79c37e56c5354

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f23968870545dacc8c810a3677e79c37e56c5354
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261104/83aea09f/attachment-0001.htm>