[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Mon Oct 19 20:30:22 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
dbb2d393 by Salvatore Bonaccorso at 2026-10-19T21:29:57+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -119,7 +119,7 @@ CVE-2026-64944 (Improper Neutralization of Input During Web Page Generation ('Cr
 CVE-2026-64943 (Insertion of Sensitive Information into Log File vulnerability in Apac ...)
 	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-55644 (Element X iOS is a Matrix iOS Client provided by Element. Element X iO ...)
-	TODO: check
+	NOT-FOR-US: Element X iOS
 CVE-2026-4418 (IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML inject ...)
 	NOT-FOR-US: IBM
 CVE-2026-4413 (IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. T ...)
@@ -145,7 +145,7 @@ CVE-2026-15661 (IBM Concert 1.0 through 3.0.0 could allow an unauthorized user t
 CVE-2026-14511 (IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to ca ...)
 	NOT-FOR-US: IBM
 CVE-2026-13695 (SQL injection (SQLi) vulnerability\u2014specifically a UNION-based vul ...)
-	TODO: check
+	NOT-FOR-US: Integratec
 CVE-2026-12727 (IBM MQ could allow an authenticated attacker to cause potential proces ...)
 	NOT-FOR-US: IBM
 CVE-2026-12670 (IBM MQ could allow an authenticated attacker to cause a denial of serv ...)
@@ -173,7 +173,7 @@ CVE-2026-11829 (IBM MQ could allow an authenticated attacker to cause a denial o
 CVE-2026-11828 (IBM MQ could allow a remote attacker with queue manager control or man ...)
 	NOT-FOR-US: IBM
 CVE-2026-11319 (TickTick Android application (com.ticktick.task) 8.2.2.0 contains a pa ...)
-	TODO: check
+	NOT-FOR-US: TickTick Android application (com.ticktick.task)
 CVE-2026-112377 (CCC Attestation SIG attested-tls-poc through commit 731ca82 fails to b ...)
 	TODO: check
 CVE-2026-112368 (An uncontrolled recursion weakness in the BSON decoding logic of the M ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dbb2d393bb3e8a5a8bcc43af18395d47e00f1534

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dbb2d393bb3e8a5a8bcc43af18395d47e00f1534
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261019/d9db44fd/attachment.htm>


More information about the debian-security-tracker-commits mailing list