[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Mon Oct 19 11:54:59 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
560d8d2e by Salvatore Bonaccorso at 2026-10-19T12:54:32+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -99,27 +99,27 @@ CVE-2026-112036 (A vulnerability was detected in Artifex MuPDF up to 1.28.5. Thi
 	NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=709768
 	NOTE: Fixed by: http://www.ghostscript.com/cgi-bin/findgit.cgi?3984925b660afb8a781ddf504021e91be1bc671e
 CVE-2026-112035 (A security vulnerability has been detected in aircheng-org iWebShop-5  ...)
-	TODO: check
+	NOT-FOR-US: aircheng-org iWebShop-5
 CVE-2026-112034 (A weakness has been identified in aircheng-org iWebShop-5 up to 5.16.  ...)
-	TODO: check
+	NOT-FOR-US: aircheng-org iWebShop-5
 CVE-2026-112033 (A security flaw has been discovered in aircheng-org iWebShop-5 up to 5 ...)
-	TODO: check
+	NOT-FOR-US: aircheng-org iWebShop-5
 CVE-2026-112032 (A vulnerability was identified in aircheng-org iWebShop-5 up to 5.16.  ...)
-	TODO: check
+	NOT-FOR-US: aircheng-org iWebShop-5
 CVE-2026-112031 (A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0. ...)
 	NOT-FOR-US: Chamilo LMS
 CVE-2026-112030 (A vulnerability was found in diem-project diem up to 5.1.3. This vulne ...)
-	TODO: check
+	NOT-FOR-US: diem-project diem
 CVE-2026-112029 (A vulnerability has been found in diem-project diem up to 5.1.3. This  ...)
-	TODO: check
+	NOT-FOR-US: diem-project diem
 CVE-2026-112028 (A flaw has been found in light0011 cms c774dce31c6df0055568a8d5c53d964 ...)
-	TODO: check
+	NOT-FOR-US: light0011 cms
 CVE-2026-112027 (A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5 ...)
-	TODO: check
+	NOT-FOR-US: light0011 cms
 CVE-2026-112026 (A security vulnerability has been detected in light0011 cms c774dce31c ...)
-	TODO: check
+	NOT-FOR-US: light0011 cms
 CVE-2026-112025 (A weakness has been identified in light0011 cms c774dce31c6df0055568a8 ...)
-	TODO: check
+	NOT-FOR-US: light0011 cms
 CVE-2026-111441 (\u5728 openGauss-server \u7684 src/gausskernel/cbb/utils/hll/hll.cpp \ ...)
 	TODO: check
 CVE-2026-111440 (\u5728 openGauss-connector-jdbc \u7684 pgjdbc/src/main/java/org/postgr ...)
@@ -133,9 +133,9 @@ CVE-2026-108983 (A vulnerability is in Web Server default connection ports under
 CVE-2026-108519
 	REJECTED
 CVE-2026-108121 (Brian Mariani from DigitalCanion SA has discovereda vulnerability in t ...)
-	TODO: check
+	NOT-FOR-US: Koozali
 CVE-2026-108120 (Brian Mariani from DigitalCanion SA has discovereda path traversal vul ...)
-	TODO: check
+	NOT-FOR-US: Koozali
 CVE-2026-106933 (The Blaze Demo Importer WordPress plugin before 1.0.17 does not saniti ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-106028 (The ActiveTrail for WooCommerce WordPress plugin through 1.2.6 does no ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/560d8d2eacfa4ed9ce01726bda0504d09d938834

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/560d8d2eacfa4ed9ce01726bda0504d09d938834
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261019/a5925fe2/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list