[Git][security-tracker-team/security-tracker][master] Process some NFUs

Tue Oct 13 08:48:29 BST 2026


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
515acce7 by Salvatore Bonaccorso at 2026-10-13T09:48:06+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,7 +1,7 @@
 CVE-2026-9268 (GitLab has remediated an issue in GitLab EE affecting all versions fro ...)
 	NOT-FOR-US: GitLab (used to be packaged in the Debian archive as src:gitlab, but never in a stable release)
 CVE-2026-97691 (Convex is an open-source reactive database for application developers. ...)
-	TODO: check
+	NOT-FOR-US: Convex
 CVE-2026-97229 (GitLab has remediated an issue in GitLab CE/EE affecting all versions  ...)
 	NOT-FOR-US: GitLab (used to be packaged in the Debian archive as src:gitlab, but never in a stable release)
 CVE-2026-96893 (GitLab has remediated an issue in GitLab EE affecting all versions fro ...)
@@ -94,7 +94,7 @@ CVE-2026-89106 (SAP UI5 does not perform sufficient input validation under certa
 CVE-2026-89105 (The HybridTokenAuthenticator component of the SAP/cloud-security-servi ...)
 	NOT-FOR-US: SAP
 CVE-2026-87689 (The Metasploit Framework Web Service REST API (msf-ws) exposes the cre ...)
-	TODO: check
+	NOT-FOR-US: Metasploit Framework Web Service REST API (msf-ws)
 CVE-2026-85529 (GitLab has remediated an issue in GitLab CE/EE affecting all versions  ...)
 	NOT-FOR-US: GitLab (used to be packaged in the Debian archive as src:gitlab, but never in a stable release)
 CVE-2026-85457 (IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated ...)
@@ -102,27 +102,27 @@ CVE-2026-85457 (IBM Planning Analytics 2.0, and 2.1 could allow a remote authent
 CVE-2026-84418 (IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-mid ...)
 	NOT-FOR-US: IBM
 CVE-2026-84360 (Nginx UI is a web user interface for the Nginx web server. Prior to 2. ...)
-	TODO: check
+	NOT-FOR-US: Nginx UI
 CVE-2026-84321 (Nginx UI is a web user interface for the Nginx web server. Prior to 2. ...)
-	TODO: check
+	NOT-FOR-US: Nginx UI
 CVE-2026-84320 (Nginx UI is a web user interface for the Nginx web server. Prior to 2. ...)
-	TODO: check
+	NOT-FOR-US: Nginx UI
 CVE-2026-84319 (Nginx UI is a web user interface for the Nginx web server. Prior to 2. ...)
-	TODO: check
+	NOT-FOR-US: Nginx UI
 CVE-2026-84318 (Nginx UI is a web user interface for the Nginx web server. From 2.0.0- ...)
-	TODO: check
+	NOT-FOR-US: Nginx UI
 CVE-2026-84317 (Nginx UI is a web user interface for the Nginx web server. Prior to 2. ...)
-	TODO: check
+	NOT-FOR-US: Nginx UI
 CVE-2026-84316 (Nginx UI is a web user interface for the Nginx web server. Prior to 2. ...)
-	TODO: check
+	NOT-FOR-US: Nginx UI
 CVE-2026-84315 (Nginx UI is a web user interface for the Nginx web server. Prior to 2. ...)
-	TODO: check
+	NOT-FOR-US: Nginx UI
 CVE-2026-84314 (Nginx UI is a web user interface for the Nginx web server. Prior to 2. ...)
-	TODO: check
+	NOT-FOR-US: Nginx UI
 CVE-2026-84313 (Nginx UI is a web user interface for the Nginx web server. Prior to 2. ...)
-	TODO: check
+	NOT-FOR-US: Nginx UI
 CVE-2026-84312 (Nginx UI is a web user interface for the Nginx web server. Prior to 2. ...)
-	TODO: check
+	NOT-FOR-US: Nginx UI
 CVE-2026-84284 (GitLab has remediated an issue in GitLab CE/EE affecting all versions  ...)
 	NOT-FOR-US: GitLab (used to be packaged in the Debian archive as src:gitlab, but never in a stable release)
 CVE-2026-82632 (GitLab has remediated an issue in GitLab CE/EE affecting all versions  ...)
@@ -188,17 +188,17 @@ CVE-2026-54868 (Improper Neutralization of Input During Web Page Generation ('Cr
 CVE-2026-54867 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-54459 (FileRise is a self-hosted web-based file manager with multi-file uploa ...)
-	TODO: check
+	NOT-FOR-US: FileRise
 CVE-2026-53997 (Netherman Portal del Hermano (portaldelhermano.es) before 2026-10-06 c ...)
-	TODO: check
+	NOT-FOR-US: Netherman Portal del Hermano (portaldelhermano.es)
 CVE-2026-53922 (odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by  ...)
-	TODO: check
+	NOT-FOR-US: odhcpd
 CVE-2026-49484 (Code for IBM i is a Visual Studio Code extension for maintaining and c ...)
-	TODO: check
+	NOT-FOR-US: Code for IBM i
 CVE-2026-49483 (Code for IBMi is a Visual Studio Code extension for maintaining and co ...)
-	TODO: check
+	NOT-FOR-US: Code for IBM i
 CVE-2026-44828 (Qexo is an open source online editor for static blogs. From 4.0.0 unti ...)
-	TODO: check
+	NOT-FOR-US: Qexo
 CVE-2026-41510 (OWASP Coraza WAF is a golang modsecurity compatible web application fi ...)
 	TODO: check
 CVE-2026-41508 (OWASP Coraza WAF is a golang modsecurity compatible web application fi ...)
@@ -753,9 +753,9 @@ CVE-2026-85471 (A flaw was found in Quay. An authenticated repository administra
 CVE-2026-84286 (ExLlamaV3\u2019s EXL3 loader uses an untrusted, model-supplied index t ...)
 	NOT-FOR-US: ExLlamaV3's EXL3 loader
 CVE-2026-83536 (A flaw was found in openstack-network-exporter. The HTTP server within ...)
-	TODO: check
+	NOT-FOR-US: Red Hat openstack-network-exporter
 CVE-2026-83535 (A flaw was found in openstack-network-exporter. When an operator confi ...)
-	TODO: check
+	NOT-FOR-US: Red Hat openstack-network-exporter
 CVE-2026-81856 (Improper Neutralization of Escape, Meta, or Control Sequences vulnerab ...)
 	- erlang-hex <unfixed>
 	NOTE: https://github.com/hexpm/hex/security/advisories/GHSA-fpmj-3cxg-p766



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/515acce77b991a543acf569458955c65c08db998

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/515acce77b991a543acf569458955c65c08db998
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261013/12a1e684/attachment-0001.htm>
