[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a4291bee by Salvatore Bonaccorso at 2026-10-07T22:30:26+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3,7 +3,7 @@ CVE-2026-97720 (Incorrect implementation of JWT/OAuth authentication in Impala e
 CVE-2026-97294 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-97146 (Apache YuniKorn 1.9.0 and earlier allows bypassing the check for the u ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-96408 (A code injection vulnerability exists in the upgrade script of Movable ...)
 	TODO: check
 CVE-2026-96335 (Missing Authorization vulnerability in WPMU DEV Forminator allows Expl ...)
@@ -23,27 +23,27 @@ CVE-2026-94662 (Improper Neutralization of Input During Web Page Generation ('Cr
 CVE-2026-93684 (An SQL user using Impala up to and including version 4.5.2 with only S ...)
 	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-93026 (This vulnerability in Veeam Backup & Replication allows a Backup Viewe ...)
-	TODO: check
+	NOT-FOR-US: Veeam
 CVE-2026-92543 (Docker Engine classifies a registry hostname as insecure using an any- ...)
 	TODO: check
 CVE-2026-92542 (The firewall rules which mark VXLAN datagrams for encryption indiscrim ...)
 	TODO: check
 CVE-2026-92533 (Path traversal vulnerability in the BugTracker.NET file download compo ...)
-	TODO: check
+	NOT-FOR-US: BugTracker.NET
 CVE-2026-92532 (Unrestricted file upload vulnerability in the BugTracker.NET attachmen ...)
-	TODO: check
+	NOT-FOR-US: BugTracker.NET
 CVE-2026-92531 (Operating system command injection vulnerability in the SVN integratio ...)
-	TODO: check
+	NOT-FOR-US: BugTracker.NET
 CVE-2026-92393 (Apache YuniKorn 1.9.0 and earlier does not implement label and user an ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-90466 (Path traversal of 'trusted_jar_paths' in Impala 4.5.2 allows an attack ...)
 	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-89417 (The OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. plugin for ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-88514 (An issue in iTerm2 macOS before 3.6.12 allows a local attacker to obta ...)
-	TODO: check
+	NOT-FOR-US: iTerm2 macOS
 CVE-2026-78243 (Apache YuniKorn 1.8.0 and later, if configured with the LDAP group res ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-76501 (A vulnerability in the Segment Routing over IPv6 (SRv6) Operation, Adm ...)
 	NOT-FOR-US: Cisco
 CVE-2026-76500 (As part of Cisco's ongoing commitment to proactive security and produc ...)
@@ -103,21 +103,21 @@ CVE-2026-76452 (A vulnerability in the web-based management interface of Cisco L
 CVE-2026-76437 (A vulnerability in the web-based user interface of Cisco License On-Pr ...)
 	TODO: check
 CVE-2026-62253 (Homer is open source telecom observability software. Prior to version  ...)
-	TODO: check
+	NOT-FOR-US: Homer
 CVE-2026-62252 (Homer is open source telecom observability software. Prior to version  ...)
-	TODO: check
+	NOT-FOR-US: Homer
 CVE-2026-62251 (Homer is open source telecom observability software. Prior to version  ...)
-	TODO: check
+	NOT-FOR-US: Homer
 CVE-2026-62179 (PraisonAI is a multi-agent teams system. In `praisonai-platform` prior ...)
 	NOT-FOR-US: PraisonAI
 CVE-2026-62176 (PraisonAI is a multi-agent teams system. Prior to version 4.6.78, the  ...)
 	NOT-FOR-US: PraisonAI
 CVE-2026-5703 (Path traversal vulnerability in the Satel Iberia SenNet Datalogger Ser ...)
-	TODO: check
+	NOT-FOR-US: Satel Iberia SenNet Datalogger Serie 200
 CVE-2026-58069 (This vulnerability in Veeam Backup & Replication allows an authenticat ...)
-	TODO: check
+	NOT-FOR-US: Veeam
 CVE-2026-58068 (This vulnerability in Veeam Agent for Microsoft Windows allows any loc ...)
-	TODO: check
+	NOT-FOR-US: Veeam
 CVE-2026-56851 (The Nickname profile can panic with an out-of-bounds slice error when  ...)
 	TODO: check
 CVE-2026-46438 (wger is a free, open-source workout and fitness manager. Prior to vers ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a4291beec83834e7d09314adc61e18bdd0e0f3fe

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a4291beec83834e7d09314adc61e18bdd0e0f3fe
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261007/bb7dd090/attachment.htm>