[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7fb6db3e by Salvatore Bonaccorso at 2026-10-09T18:21:08+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -649,27 +649,27 @@ CVE-2026-107399 (The Mechanize library is used for automating interaction with w
 	NOTE: Fixed by: https://github.com/sparklemotion/mechanize/commit/02a1235842d6eda8d4a5a3d8f13aba2cecf52e4f (v2.14.1)
 	NOTE: Fixed by: https://github.com/sparklemotion/mechanize/commit/84c74df87d15f5d119df268ba6aa79bc1e16a2c3 (v2.14.1)
 CVE-2026-107397 (Indico is an event management system that uses Flask-Multipass, a mult ...)
-	TODO: check
+	NOT-FOR-US: Indico
 CVE-2026-107396 (Indico is an event management system that uses Flask-Multipass, a mult ...)
-	TODO: check
+	NOT-FOR-US: Indico
 CVE-2026-107395 (Indico is an event management system that uses Flask-Multipass, a mult ...)
-	TODO: check
+	NOT-FOR-US: Indico
 CVE-2026-107394 (Indico is an event management system that uses Flask-Multipass, a mult ...)
-	TODO: check
+	NOT-FOR-US: Indico
 CVE-2026-107393 (FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8. ...)
-	TODO: check
+	NOT-FOR-US: FreeScout
 CVE-2026-107392 (music-metadata is a metadata parser for audio and video media files. P ...)
-	TODO: check
+	NOT-FOR-US: music-metadata
 CVE-2026-107391 (music-metadata is a metadata parser for audio and video media files. I ...)
-	TODO: check
+	NOT-FOR-US: music-metadata
 CVE-2026-107390 (music-metadata is a metadata parser for audio and video media files. P ...)
-	TODO: check
+	NOT-FOR-US: music-metadata
 CVE-2026-107389 (music-metadata is a metadata parser for audio and video media files. P ...)
-	TODO: check
+	NOT-FOR-US: music-metadata
 CVE-2026-107388 (music-metadata is a metadata parser for audio and video media files. P ...)
-	TODO: check
+	NOT-FOR-US: music-metadata
 CVE-2026-107387 (music-metadata is a metadata parser for audio and video media files. P ...)
-	TODO: check
+	NOT-FOR-US: music-metadata
 CVE-2026-107386 (amqp091-go is a Go AMQP 0.9.1 client. From 1.13.0 until 1.14.0, the fr ...)
 	- golang-github-rabbitmq-amqp091-go 1.14.0-1
 	NOTE: https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-w6r9-248c-frg8



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7fb6db3e8d35a7c1feaed2ecf295e4174061552a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7fb6db3e8d35a7c1feaed2ecf295e4174061552a
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261009/9b317759/attachment-0001.htm>