[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
68d0fdb9 by Salvatore Bonaccorso at 2026-10-13T10:38:03+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -200,15 +200,15 @@ CVE-2026-49483 (Code for IBMi is a Visual Studio Code extension for maintaining
 CVE-2026-44828 (Qexo is an open source online editor for static blogs. From 4.0.0 unti ...)
 	NOT-FOR-US: Qexo
 CVE-2026-41510 (OWASP Coraza WAF is a golang modsecurity compatible web application fi ...)
-	TODO: check
+	NOT-FOR-US: OWASP Coraza WAF
 CVE-2026-41508 (OWASP Coraza WAF is a golang modsecurity compatible web application fi ...)
-	TODO: check
+	NOT-FOR-US: OWASP Coraza WAF
 CVE-2026-41504 (OWASP Coraza WAF is a golang modsecurity compatible web application fi ...)
-	TODO: check
+	NOT-FOR-US: OWASP Coraza WAF
 CVE-2026-41210 (Moonlight Qt is a GameStream client for Windows, macOS, Linux, and Ste ...)
 	TODO: check
 CVE-2026-35001 (OpenS100 through commit daa35b contains an integer overflow vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: OpenS100
 CVE-2026-19938 (The Bluetooth host's ATT transmit path releases a buffer it does not o ...)
 	NOT-FOR-US: Zephyr, different from src:zephyr
 CVE-2026-19937 (The Bluetooth Mesh Access layer delayable-message machinery in subsys/ ...)
@@ -258,7 +258,7 @@ CVE-2026-14210 (GitLab has remediated an issue in GitLab CE/EE affecting all ver
 CVE-2026-109786 (In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter (conf ...)
 	TODO: check
 CVE-2026-109758 (Perforce Helix Authentication Service (HAS) deployments that retain th ...)
-	TODO: check
+	NOT-FOR-US: Perforce Helix Authentication Service (HAS) deployment
 CVE-2026-109675 (Frappe Suite before commit 2697564a9c46da6acc614743eaf9915fe5238f4f co ...)
 	NOT-FOR-US: Frappe
 CVE-2026-109674 (Frappe ERPNext before 15.98.0 and 16.x before 16.6.0 contains an SQL i ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/68d0fdb9324e49bf217ab6c663c38d8de893d051

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/68d0fdb9324e49bf217ab6c663c38d8de893d051
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261013/783a9d11/attachment-0001.htm>