[Git][security-tracker-team/security-tracker][master] more vulncheck noise

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1fe63ee2 by Moritz Mühlenhoff at 2026-10-19T23:59:47+02:00
more vulncheck noise

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -280,7 +280,7 @@ CVE-2026-112309 (@rvf/set-get before 7.0.4 contains a prototype pollution vulner
 CVE-2026-112308 (crewai-tools through 1.15.28 contains a server-side request forgery vu ...)
 	NOT-FOR-US: crewai-tools
 CVE-2026-112307 (sqlparse through 0.6.0 contains a PHP code injection vulnerability tha ...)
-	TODO: check
+	- sqlparse <undetermined>
 CVE-2026-112306 (NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQ ...)
 	NOT-FOR-US: NocoBase
 CVE-2026-112305 (Semaphore UI through 2.19.16 contains a remote code execution vulnerab ...)
@@ -324,11 +324,19 @@ CVE-2026-112281 (libaribb24 (aribb24) through 1.0.3 contains a stack-based buffe
 CVE-2026-112280 (libaribb24 (aribb24) through 1.0.3 contains a heap-based buffer overfl ...)
 	- arrib24 <undetermined>
 CVE-2026-112279 (rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerabilit ...)
-	TODO: check
+	- rdesktop <unfixed> (unimportant)
+	NOTE: https://github.com/rdesktop/rdesktop/issues/436
+	NOTE: https://github.com/rdesktop/rdesktop/pull/437
+	NOTE: Crash in GUI tool, no security impact
 CVE-2026-112278 (rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerabilit ...)
-	TODO: check
+	- rdesktop <unfixed> (unimportant)
+	NOTE: https://github.com/rdesktop/rdesktop/pull/437
+	NOTE: Crash in GUI tool, no security impact
 CVE-2026-112277 (rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerabilit ...)
-	TODO: check
+	- rdesktop <unfixed> (unimportant)
+	NOTE: https://github.com/rdesktop/rdesktop/issues/436
+	NOTE: https://github.com/rdesktop/rdesktop/pull/437
+	NOTE: Crash in GUI tool, no security impact
 CVE-2026-112276 (Netpbm through 11.16.00 contains a heap out-of-bounds read vulnerabili ...)
 	- netpbm-free <undetermined>
 CVE-2026-112275 (Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerabil ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1fe63ee2185b0e4aeef7b53ed37f9995119a57d2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1fe63ee2185b0e4aeef7b53ed37f9995119a57d2
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261019/86cd3303/attachment.htm>