[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2026-81736 keep style with the notes added in same commit earlier

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5e140c19 by Salvatore Bonaccorso at 2026-10-14T15:53:22+02:00
CVE-2026-81736 keep style with the notes added in same commit earlier

- - - - -
1a344554 by Salvatore Bonaccorso at 2026-10-14T15:53:24+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4611,9 +4611,9 @@ CVE-2026-104250 (The unstructured library provides open-source components for in
 CVE-2026-104192 (Dragonfly is an in-memory data store built for modern application work ...)
 	NOT-FOR-US: Dragonfly
 CVE-2026-104126 (JumpServer is an open source bastion host and an operation and mainten ...)
-	TODO: check
+	NOT-FOR-US: JumpServer
 CVE-2026-104085 (odt2spip plugin for SPIP before 4.4.0 contains an OS command injection ...)
-	TODO: check
+	NOT-FOR-US: odt2spip plugin for SPIP
 CVE-2026-104011
 	REJECTED
 CVE-2026-104005 (A security issue was discovered in MongoDB mongos (the sharded cluster ...)
@@ -4651,13 +4651,13 @@ CVE-2026-103030 (Dio is a powerful HTTP client for Dart and Flutter. From 1.0.0
 CVE-2026-103028 (SFTPGo is an open source, event-driven file transfer solution. From 2. ...)
 	- sftpgo <itp> (bug #1050829)
 CVE-2026-102989 (TanStack Router is a client-first, server-capable, fully type-safe rou ...)
-	TODO: check
+	NOT-FOR-US: TanStack Router
 CVE-2026-102988 (Plane is an open-source project management tool. Prior to 1.4.0, multi ...)
-	TODO: check
+	NOT-FOR-US: Plane
 CVE-2026-102982 (Plane is an open-source project management tool. Prior to 1.4.0, the p ...)
-	TODO: check
+	NOT-FOR-US: Plane
 CVE-2026-102981 (Plane is an open-source project management tool. Prior to 1.4.0, self- ...)
-	TODO: check
+	NOT-FOR-US: Plane
 CVE-2026-102850 (Heap-based buffer overflow in Microsoft Office Access allows an unauth ...)
 	NOT-FOR-US: Microsoft
 CVE-2026-102849 (Heap-based buffer overflow in Microsoft Office Access allows an unauth ...)
@@ -41422,8 +41422,8 @@ CVE-2026-81563 (A BIND resolver encountering an SVCB/HTTPS AliasMode record refe
 CVE-2026-81736 (If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records,  ...)
 	{DSA-6505-1}
 	- bind9 1:9.20.29-1
-	NOTE: https://github.com/isc-projects/bind9/commit/17177ec18a4a62b7c67a6d76b3e8efb94886caa6 (bind-9.18)
 	NOTE: https://kb.isc.org/docs/cve-2026-81736
+	NOTE: https://github.com/isc-projects/bind9/commit/17177ec18a4a62b7c67a6d76b3e8efb94886caa6 (bind-9.18)
 CVE-2026-81642 (In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was  ...)
 	{DSA-6507-1}
 	- unbound 1.26.1-1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/e6d09ce6dc4cf892e5c89a14baf72741993eef44...1a344554e1dd5c3b6c6691a8849a47b647f816a1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/e6d09ce6dc4cf892e5c89a14baf72741993eef44...1a344554e1dd5c3b6c6691a8849a47b647f816a1
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261014/8d0142ea/attachment.htm>