[Git][security-tracker-team/security-tracker][master] Process some NFUs

Thu Oct 15 12:26:43 BST 2026


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e08d6075 by Salvatore Bonaccorso at 2026-10-15T13:26:14+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -141,9 +141,9 @@ CVE-2026-14572 (The Kirki \u2013 Freeform Page Builder, Website Builder & Custom
 CVE-2026-11905 (The Elementor Website Builder \u2013 more than just a page builder plu ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-110934 (Improper validation of array index vulnerability in Samsung Open Sourc ...)
-	TODO: check
+	NOT-FOR-US: Samsung
 CVE-2026-110933 (Uncaught exception vulnerability in Samsung Open Source Vyond allows I ...)
-	TODO: check
+	NOT-FOR-US: Samsung
 CVE-2026-110926 (A flaw was found in OpenSSH. When compression is negotiated, channels  ...)
 	TODO: check
 CVE-2026-110925 (A flaw was found in OpenSSH. A username entered on the ssh command lin ...)
@@ -157,13 +157,13 @@ CVE-2026-110911 (Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-sup
 CVE-2026-110909 (Wheels CLI through 4.1.0 does not verify that the local development se ...)
 	TODO: check
 CVE-2026-110908 (Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revis ...)
-	TODO: check
+	NOT-FOR-US: Netgate pfSense FRR package (pfSense-pkg-frr)
 CVE-2026-110907 (Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishan ...)
-	TODO: check
+	NOT-FOR-US: Backdrop CMS
 CVE-2026-110904 (ApostropheCMS before 4.33.0 allows authentication bypass for REST API  ...)
-	TODO: check
+	NOT-FOR-US: ApostropheCMS
 CVE-2026-110873 (Heym from 0.0.55 before 0.0.121 contains a privilege escalation vulner ...)
-	TODO: check
+	NOT-FOR-US: Heym
 CVE-2026-110872 (Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity d ...)
 	- node-nodemailer 10.0.10+~8.0.1-1
 	NOTE: https://github.com/nodemailer/nodemailer/security/advisories/GHSA-4g23-2xm8-66gc
@@ -718,15 +718,15 @@ CVE-2026-55167 (LDAP Account Manager (LAM) is a webfrontend for managing entries
 	NOTE: https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-xgjg-fchx-x3g3
 	NOTE: Fixed by: https://github.com/LDAPAccountManager/lam/commit/a56dcaab3e0f572283f5861404ed58d5ea301bc6 (9.6)
 CVE-2026-54554 (FOG is a free open-source cloning/imaging/rescue suite/inventory manag ...)
-	TODO: check
+	NOT-FOR-US: FOG
 CVE-2026-54525 (Markdown Preview Enhanced is a Markdown preview extension for Visual S ...)
-	TODO: check
+	NOT-FOR-US: Markdown Preview Enhanced extension for Visual Studio Code
 CVE-2026-53999 (Radius is a cloud-native, portable application platform that makes app ...)
-	TODO: check
+	NOT-FOR-US: Radius
 CVE-2026-49206 (rapidcsv is a C++ CSV parser library. Prior to 8.99, RemoveColumn, Ins ...)
-	TODO: check
+	NOT-FOR-US: rapidcsv
 CVE-2026-42093 (Redash is a package for data visualization and sharing. From versions  ...)
-	TODO: check
+	NOT-FOR-US: Redash
 CVE-2026-35161 (Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an O ...)
 	NOT-FOR-US: Dell / EMC
 CVE-2026-33798 (A Stack-based Buffer Overflow vulnerability in the srxpfe of Juniper N ...)
@@ -744,16 +744,16 @@ CVE-2026-25946 (When OpenID sign-in is enabled, Gitea accepts a user-supplied Op
 CVE-2026-19673 (ethernet_recv() in subsys/net/l2/ethernet/ethernet.c validates only th ...)
 	NOT-FOR-US: Zephyr, different from src:zephyr
 CVE-2026-16741 (Improper neutralization of special elements used in an OS command ('OS ...)
-	TODO: check
+	NOT-FOR-US: TR7 ASP
 CVE-2026-16740 (Missing authentication for critical function vulnerability in TR7 Cybe ...)
-	TODO: check
+	NOT-FOR-US: TR7 ASP
 CVE-2026-15176 (A vulnerability exists in NGINX Plus and NGINX Open Source when a loca ...)
 	- nginx 1.30.4-8
 	NOTE: https://my.f5.com/manage/s/article/K000162416
 CVE-2026-15102 (ADP Desktop SDK contains a vulnerability where sensitive information i ...)
 	NOT-FOR-US: Autodesk
 CVE-2026-14851 (A vulnerability relating to the exposure of confidential information i ...)
-	TODO: check
+	NOT-FOR-US: Coparts online billing service
 CVE-2026-110777 (A flaw was found in evolution-data-server. Calendar events containing  ...)
 	TODO: check
 CVE-2026-110775 (Nexent through 2.7.0 contains a missing authorization vulnerability in ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e08d6075da71372362ab1a1e311abfb4e6047ea0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e08d6075da71372362ab1a1e311abfb4e6047ea0
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261015/527533cd/attachment.htm>
