[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
270d4564 by Moritz Muehlenhoff at 2026-10-08T10:07:55+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -47,13 +47,13 @@ CVE-2026-94244 (The Wallet System for WooCommerce  WordPress plugin before 2.8.0
 CVE-2026-94154 (The Aurora Heatmap plugin for WordPress is vulnerable to Stored Cross- ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-92862 (The Android application "Ticket Ryutsu Center" improperly handles cust ...)
-	TODO: check
+	NOT-FOR-US: Android application Ticket Ryutsu Center
 CVE-2026-92861 (The Android application "Ticket Ryutsu Center" contains hard-coded cre ...)
-	TODO: check
+	NOT-FOR-US: Android application Ticket Ryutsu Center
 CVE-2026-89322 (Vault and Vault Enterprise did not consistently evaluate ACL policies  ...)
 	NOT-FOR-US: Hashicorp products not packaged in Debian
 CVE-2026-87726 (Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC66 ...)
-	TODO: check
+	NOT-FOR-US: NXP
 CVE-2026-87688 (An input validation vulnerability exists in the security certificate m ...)
 	NOT-FOR-US: Brocade
 CVE-2026-87687 (An authorization and input validation vulnerability exists in Brocade  ...)
@@ -211,19 +211,19 @@ CVE-2026-17538 (The LatePoint - Appointment Booking & Reservation plugin for Wor
 CVE-2026-17196 (The Super Forms \u2013 Drag & Drop Form Builder plugin for WordPress i ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-107459 (The SecuShare Pro developed by Openfind has an OS Command Injection vu ...)
-	TODO: check
+	NOT-FOR-US: SecuShare Pro
 CVE-2026-107450 (In Stump through 0.1.10, the updateSmartList and deleteSmartList Graph ...)
-	TODO: check
+	NOT-FOR-US: Stump
 CVE-2026-107449 (linuxserver Heimdall through 2.8.3 applies its SafeUrlFetcher SSRF pro ...)
-	TODO: check
+	NOT-FOR-US: Heimdall
 CVE-2026-107448 (Magic: The Gathering Arena (Windows/Steam client; 2026.59.30.12801.127 ...)
-	TODO: check
+	NOT-FOR-US: Magic: The Gathering Arena
 CVE-2026-107446 (containerd overlaybd through 1.0.18 has a do_load_index (LSMT index lo ...)
 	TODO: check
 CVE-2026-107445 (A flaw was found in Katello where the Flatpak Remote Repositories API  ...)
-	TODO: check
+	NOT-FOR-US: Katello
 CVE-2026-107444 (A flaw was found in Katello where the Docker Tags repositories API doe ...)
-	TODO: check
+	NOT-FOR-US: Katello
 CVE-2026-107355
 	REJECTED
 CVE-2026-107354
@@ -263,7 +263,7 @@ CVE-2026-107228 (The AsyncHttpClient (AHC) library allows Java applications to e
 CVE-2026-107227 (The AsyncHttpClient (AHC) library allows Java applications to easily e ...)
 	TODO: check
 CVE-2026-107176 (A flaw was found in the cluster-samples-operator. The RBAC Role coreos ...)
-	TODO: check
+	NOT-FOR-US: cluster-samples-operator
 CVE-2026-107161 (A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_ ...)
 	TODO: check
 CVE-2026-105820 (Vault's ACL policy cache allowed namespace traversal when policy names ...)
@@ -305,7 +305,7 @@ CVE-2023-5649 (An Improper Input Validation vulnerability for the registered cas
 CVE-2023-5648 (In Brocade ASCG before Brocade ASCG v3.0, several security-related HTT ...)
 	NOT-FOR-US: Brocade
 CVE-2017-20283 (NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: NXP
 CVE-2026-84790
 	- openvpn 2.7.8-1
 	NOTE: Fixed by: https://github.com/OpenVPN/openvpn/commit/cf4384eef4676a01bd3ee98fa602f7b2af8079ea (v2.7.8)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/270d456416edb9c672bb3fc6bcdc006131c22170

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/270d456416edb9c672bb3fc6bcdc006131c22170
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261008/43109c5f/attachment-0001.htm>