[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e69344fc by Salvatore Bonaccorso at 2026-10-15T09:53:11+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -21,9 +21,9 @@ CVE-2026-78087 (The VK Blocks plugin for WordPress is vulnerable to Stored Cross
 CVE-2026-78001 (The Post and Page Builder by BoldGrid \u2013 Visual Drag and Drop Edit ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-77931 (MoviePilot through 3.1.5 contains a command injection vulnerability th ...)
-	TODO: check
+	NOT-FOR-US: MoviePilot
 CVE-2026-77427 (FileRise is a self-hosted web-based file manager with multi-file uploa ...)
-	TODO: check
+	NOT-FOR-US: FileRise
 CVE-2026-76668 (A security vulnerability inHPE NonStop Kernel may allow user space acc ...)
 	NOT-FOR-US: HPE
 CVE-2026-76667 (A security vulnerability inHPE NonStop EXPAND may result in out-of-bou ...)
@@ -47,19 +47,19 @@ CVE-2026-76659 (A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILI
 CVE-2026-76656 (A   vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unaut ...)
 	NOT-FOR-US: HPE
 CVE-2026-76066 (IntentKit through 2.6.3 contains an authorization bypass vulnerability ...)
-	TODO: check
+	NOT-FOR-US: IntentKit
 CVE-2026-74920 (The Document Gallery WordPress plugin through 5.1.1 does not properly  ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-73799 (A security vulnerability inHPE NonStop SNMP Trap Multiplexer may cause ...)
 	NOT-FOR-US: HPE
 CVE-2026-71854 (OpenAEV is an open source platform allowing organizations to plan, sch ...)
-	TODO: check
+	NOT-FOR-US: OpenAEV
 CVE-2026-69194 (FileRise is a self-hosted web-based file manager with multi-file uploa ...)
-	TODO: check
+	NOT-FOR-US: FileRise
 CVE-2026-69193 (FileRise is a self-hosted web-based file manager with multi-file uploa ...)
-	TODO: check
+	NOT-FOR-US: FileRise
 CVE-2026-69191 (FileRise is a self-hosted web-based file manager with multi-file uploa ...)
-	TODO: check
+	NOT-FOR-US: FileRise
 CVE-2026-64856 (FileRise is a self-hosted web-based file manager with multi-file uploa ...)
 	TODO: check
 CVE-2026-62664 (FileRise is a self-hosted web-based file manager with multi-file uploa ...)
@@ -564,33 +564,33 @@ CVE-2026-86476 (A flaw was found in gst-plugins-base. A heap buffer overflow can
 CVE-2026-86461 (The FV Flowplayer Video Player plugin for WordPress is vulnerable to L ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-86002 (Dokku is a docker-powered platform as a service. In Dokku versions bef ...)
-	TODO: check
+	NOT-FOR-US: Dokku
 CVE-2026-85714 (Stirling-PDF is a locally hosted web application that facilitates vari ...)
-	TODO: check
+	NOT-FOR-US: Stirling-PDF
 CVE-2026-85298 (An Incorrect Authorization vulnerability in the AuthConfig validation  ...)
-	TODO: check
+	NOT-FOR-US: Google Cloud Application Integration
 CVE-2026-82844 (The WPForms Lite WordPress plugin before 2.0.2.2 does not verify serve ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-82402 (Gogs is an open source self-hosted Git service. Prior to 0.15.0+dev, a ...)
-	TODO: check
+	NOT-FOR-US: Go Git Service
 CVE-2026-82153 (Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure S ...)
 	NOT-FOR-US: Dell / EMC
 CVE-2026-82026 (Radar before 1.12.2 contains a missing authorization vulnerability in  ...)
-	TODO: check
+	NOT-FOR-US: Radar
 CVE-2026-79957 (ServiceNext contains an insecure direct object reference (IDOR) in the ...)
-	TODO: check
+	NOT-FOR-US: ServiceNext
 CVE-2026-78433 (Gitea's web attachment handler skips its cross-repository ownership ch ...)
 	NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
 CVE-2026-78231 (When OpenID sign-in is enabled, Gitea processes unauthenticated assert ...)
 	NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
 CVE-2026-77572 (VeraCrypt provides disk encryption with strong security based on TrueC ...)
-	TODO: check
+	NOT-FOR-US: VeraCrypt
 CVE-2026-77564 (Talos Linux is a Linux distribution built for Kubernetes deployments.  ...)
-	TODO: check
+	NOT-FOR-US: Talos Linux
 CVE-2026-77524 (KEDA is a Kubernetes-based Event Driven Autoscaling component. In vers ...)
-	TODO: check
+	NOT-FOR-US: KEDA
 CVE-2026-77371 (Redash is a package for data visualization and sharing. From 26.0.0 un ...)
-	TODO: check
+	NOT-FOR-US: Redash
 CVE-2026-76655 (A security vulnerability inHPE NonStop SNMP Trap Multiplexer may allow ...)
 	NOT-FOR-US: HPE
 CVE-2026-76519 (A vulnerability in the Advanced Malware Protection (AMP) feature of Ci ...)
@@ -598,7 +598,7 @@ CVE-2026-76519 (A vulnerability in the Advanced Malware Protection (AMP) feature
 CVE-2026-76113 (Dell Terraform Provider for Redfish, versions 1.1.0 through 1.6.1, con ...)
 	NOT-FOR-US: Dell / EMC
 CVE-2026-76083 (Redash is a package for data visualization and sharing. From 10.0.0 un ...)
-	TODO: check
+	NOT-FOR-US: Redash
 CVE-2026-75085 (The STM32WBA IEEE 802.15.4 driver in drivers/ieee802154/ieee802154_stm ...)
 	NOT-FOR-US: Zephyr, different from src:zephyr
 CVE-2026-75084 (The CC1200 sub-GHz IEEE 802.15.4 driver takes the PHY packet length fr ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e69344fcb1c80f28fcff52604d5f88a2a568b25e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e69344fcb1c80f28fcff52604d5f88a2a568b25e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261015/c2fd7a49/attachment-0001.htm>