[Git][security-tracker-team/security-tracker][master] Track several issues from same reporter without upstream reports as undetermined

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c318df99 by Salvatore Bonaccorso at 2026-10-17T12:16:17+02:00
Track several issues from same reporter without upstream reports as undetermined

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -521,9 +521,9 @@ CVE-2026-111680 (APIPark through 1.9.7-beta contains an authorization bypass vul
 CVE-2026-111679 (Ekko Studio through 0.7.36 contains a missing authorization vulnerabil ...)
 	NOT-FOR-US: Ekko Studio
 CVE-2026-111678 (Antiword through 0.37 contains a stack out-of-bounds read vulnerabilit ...)
-	TODO: check
+	- antiword <undetermined>
 CVE-2026-111677 (Antiword through 0.37 contains a heap out-of-bounds read vulnerability ...)
-	TODO: check
+	- antiword <undetermined>
 CVE-2026-111676 (Faveo Helpdesk through 2.0.3 contains a broken access control vulnerab ...)
 	NOT-FOR-US: Faveo Helpdesk
 CVE-2026-111675 (Course-tencent-cloud through 2.0.1 contains an improper restriction of ...)
@@ -2951,13 +2951,13 @@ CVE-2026-110717 (Janus WebRTC Server through 1.4.3 contains a path traversal vul
 CVE-2026-110716 (unshield through 1.6.2 contains a heap out-of-bounds read vulnerabilit ...)
 	- unshield <undetermined>
 CVE-2026-110715 (MuJS 1.3.6 before 1.3.9 contains a heap out-of-bounds read and write v ...)
-	TODO: check
+	- mujs <undetermined>
 CVE-2026-110714 (libsmb2 through 6.2 contains an integer underflow vulnerability in dec ...)
-	TODO: check
+	- libsmb2 <undetermined>
 CVE-2026-110713 (libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability i ...)
-	TODO: check
+	- libsmb2 <undetermined>
 CVE-2026-110712 (libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability i ...)
-	TODO: check
+	- libsmb2 <undetermined>
 CVE-2026-110690 (Cloud Commander (cloudcmd) versions 19.20.2 through 19.21.1 contains a ...)
 	NOT-FOR-US: Cloud Commander (cloudcmd)
 CVE-2026-110667 (A security flaw has been discovered in cemtan sar2html 4.0.0. Affected ...)
@@ -2971,15 +2971,15 @@ CVE-2026-110660 (vgmstream through r2117 contains a stack out-of-bounds read vul
 CVE-2026-110659 (ELFIO through 3.12 contains a NULL pointer dereference vulnerability i ...)
 	NOT-FOR-US: ELFIO
 CVE-2026-110658 (Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerabi ...)
-	TODO: check
+	- sofia-sip <undetermined>
 CVE-2026-110657 (Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 c ...)
 	NOT-FOR-US: Khronos NNEF-Tools nnef
 CVE-2026-110656 (miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vu ...)
-	TODO: check
+	- miniupnpc <undetermined>
 CVE-2026-110655 (miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vu ...)
-	TODO: check
+	- miniupnpc <undetermined>
 CVE-2026-110654 (libzvbi through 0.2.45 contains an out-of-bounds write vulnerability i ...)
-	TODO: check
+	- zvbi <undetermined>
 CVE-2026-110652 (ONLYOFFICE DocumentServer before 10.0.0 contains an unauthenticated se ...)
 	NOT-FOR-US: ONLYOFFICE
 CVE-2026-110650 (The thumbnail Python package through 1.5 contains an OS command inject ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c318df99f2030dd27b8dc4576b65ade6b9d0ff46

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c318df99f2030dd27b8dc4576b65ade6b9d0ff46
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261017/53df073e/attachment.htm>