[Git][security-tracker-team/security-tracker][master] Process some more NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c50db0b8 by Salvatore Bonaccorso at 2026-10-18T22:10:15+02:00
Process some more NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -29,15 +29,15 @@ CVE-2026-112053 (Schroedinger libschroedinger through 1.0.11 contains an out-of-
 CVE-2026-112052 (libspatialite through 5.1.0 contains an integer overflow vulnerability ...)
 	- spatialite <undetermined>
 CVE-2026-112051 (Xinference through 4.0.1 contains a path traversal vulnerability on Wi ...)
-	TODO: check
+	NOT-FOR-US: Xinference
 CVE-2026-112050 (Gitify before 7.10.0 contains a login cross-site request forgery vulne ...)
-	TODO: check
+	NOT-FOR-US: Gitify
 CVE-2026-112049 (Vita3K before build 4187 contains a path traversal (zip slip) vulnerab ...)
-	TODO: check
+	NOT-FOR-US: Vita3K
 CVE-2026-112048 (libspatialite through 5.1.0 fails to validate the polygon ring count i ...)
 	- spatialite <undetermined>
 CVE-2026-112047 (OneUptime 14.0.2 before 14.0.69 contains an incorrect authorization vu ...)
-	TODO: check
+	NOT-FOR-US: OneUptime
 CVE-2026-112046 (OW2 ASM 9.11 before 9.11.1 contains an infinite loop vulnerability in  ...)
 	- asm <unfixed>
 	NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/480
@@ -46,25 +46,25 @@ CVE-2026-112021 (snac2 before 2.93 contains a heap-based buffer overflow vulnera
 	- snac2 2.93-1
 	NOTE: Fixed by: https://codeberg.org/grunfink/snac2/commit/ec2c5c2046e0381bc942ec5d0d05ec861fe377e7 (2.93)
 CVE-2026-112020 (LodePNG through 20261006 contains a heap out-of-bounds read vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: LodePNG
 CVE-2026-112019 (cgltf through 1.15 contains a heap out-of-bounds read vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: cgltf
 CVE-2026-112018 (cgltf through 1.15 contains a heap out-of-bounds write vulnerability i ...)
-	TODO: check
+	NOT-FOR-US: cgltf
 CVE-2026-112017 (JeecgBoot before 3.9.5 contains an sql injection vulnerability that al ...)
 	NOT-FOR-US: JeecgBoot
 CVE-2026-112016 (Netcore NR256CN through 1.5.140116 contains an unauthenticated file wr ...)
 	NOT-FOR-US: Netcore
 CVE-2026-112015 (Omnigent 0.3.0 before 0.14.0 contains a path traversal vulnerability t ...)
-	TODO: check
+	NOT-FOR-US: Omnigent
 CVE-2026-112014 (LobsterAI before 2026.10.16 contains a hardcoded password vulnerabilit ...)
-	TODO: check
+	NOT-FOR-US: LobsterAI
 CVE-2026-112013 (libtta through 2.3 contains a divide-by-zero vulnerability in tta_deco ...)
-	TODO: check
+	NOT-FOR-US: libtta
 CVE-2026-112012 (libtta through 2.3 contains a stack out-of-bounds read and write vulne ...)
-	TODO: check
+	NOT-FOR-US: libtta
 CVE-2026-112011 (libtta through 2.3 contains an integer overflow vulnerability in tta_d ...)
-	TODO: check
+	NOT-FOR-US: libtta
 CVE-2026-112010 (smpeg through 2.0.0 contains an integer underflow vulnerability in str ...)
 	TODO: check
 CVE-2026-112009 (smpeg through 2.0.0 contains a heap out-of-bounds read vulnerability i ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c50db0b8301b03e0ea80868d4c5fb1baf1bf76e6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c50db0b8301b03e0ea80868d4c5fb1baf1bf76e6
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261018/fc7d66a9/attachment-0001.htm>