[Git][security-tracker-team/security-tracker][master] mark dask as non issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
13491d70 by Moritz Muehlenhoff at 2026-10-06T22:19:27+02:00
mark dask as non issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -17569,10 +17569,9 @@ CVE-2026-95925 (A vulnerability was found in SourceCodester Online Reviewer Mana
 CVE-2026-95924 (A vulnerability has been found in SourceCodester Online Reviewer Manag ...)
 	NOT-FOR-US: SourceCodester
 CVE-2026-95897 (A security vulnerability has been detected in Dask up to 2026.8.0. Thi ...)
-	- dask <unfixed>
-	[trixie] - dask <no-dsa> (Minor issue)
-	[bookworm] - dask <postponed> (Minor issue)
+	- dask <unfixed> (unimportant)
 	NOTE: https://github.com/dask/dask/issues/12578
+	NOTE: Not considered a security issue by upstream
 CVE-2026-95868 (A weakness has been identified in AdithyaYelloju Restaurant-Management ...)
 	NOT-FOR-US: AdithyaYelloju Restaurant-Management-System
 CVE-2026-95833 (A weakness has been identified in itsourcecode Leave Management System ...)
@@ -45249,7 +45248,6 @@ CVE-2026-71224 (A stack overflow vulnerability was found in gfs2-utils. The meta
 	[trixie] - gfs2-utils <no-dsa> (Minor issue)
 	[bookworm] - gfs2-utils <postponed> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2511397
-	TODO: check upstream details
 CVE-2026-71223
 	- gfs2-utils 3.6.1-2 (bug #1146712)
 	[trixie] - gfs2-utils <no-dsa> (Minor issue)
@@ -45260,25 +45258,21 @@ CVE-2026-71222 (A heap out-of-bounds read vulnerability was found in gfs2-utils.
 	[trixie] - gfs2-utils <no-dsa> (Minor issue)
 	[bookworm] - gfs2-utils <postponed> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2511399
-	TODO: check upstream details
 CVE-2026-71221 (A stack out-of-bounds write vulnerability was found in gfs2-utils. In  ...)
 	- gfs2-utils 3.6.1-2 (bug #1146712)
 	[trixie] - gfs2-utils <no-dsa> (Minor issue)
 	[bookworm] - gfs2-utils <postponed> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2511396
-	TODO: check upstream details
 CVE-2026-71220 (A stack out-of-bounds write vulnerability was found in gfs2-utils. In  ...)
 	- gfs2-utils 3.6.1-2 (bug #1146712)
 	[trixie] - gfs2-utils <no-dsa> (Minor issue)
 	[bookworm] - gfs2-utils <postponed> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2511398
-	TODO: check upstream details
 CVE-2026-71219 (A stack overflow vulnerability was found in gfs2-utils. The hash table ...)
 	- gfs2-utils 3.6.1-2 (bug #1146712)
 	[trixie] - gfs2-utils <no-dsa> (Minor issue)
 	[bookworm] - gfs2-utils <postponed> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2507750
-	TODO: check upstream details
 CVE-2026-6071 (A remote code execution security issue exists in the affected products ...)
 	NOT-FOR-US: Rockwell Automation
 CVE-2026-68860 (Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/13491d70e89b2e4d47b37690debe26e5972d1999

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/13491d70e89b2e4d47b37690debe26e5972d1999
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261006/30a2062f/attachment.htm>