[Git][security-tracker-team/security-tracker][master] Process some NFUs

Tue Oct 20 13:15:25 BST 2026


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
146fc601 by Salvatore Bonaccorso at 2026-10-20T14:14:13+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -167,13 +167,13 @@ CVE-2026-17518 (Buffer Copy without Checking Size of Input in certain ASUS route
 CVE-2026-12489 (An incorrect authorization vulnerability in the Data Access Layer (DAL ...)
 	NOT-FOR-US: Zyxel
 CVE-2026-113404 (WebITR developed by Uniong has a Insecure Deserialization vulnerabilit ...)
-	TODO: check
+	NOT-FOR-US: WebITR from Uniong
 CVE-2026-113402 (ArmorX Spam developed by ArmorX Global Technology has a Local File Inc ...)
-	TODO: check
+	NOT-FOR-US: ArmorX
 CVE-2026-113380 (In the RingRTC library before 2.72.0 for Signal, a peer that saturates ...)
-	TODO: check
+	NOT-FOR-US: RingRTC library for Signal
 CVE-2026-112991 (The html_to_markdown expansion module in MISP Modules contains a serve ...)
-	TODO: check
+	NOT-FOR-US: html_to_markdown expansion module in MISP Modules
 CVE-2026-112901 (Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM head ...)
 	- pillow <unfixed>
 	NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-xgh8-jp6q-p5x8
@@ -216,13 +216,13 @@ CVE-2026-112891 (Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pi
 	NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-fc9g-5qg7-mf45
 	NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/68a3fe957d8a4d552e8c69d96066d749f0614c7e (13.0.0)
 CVE-2026-112782 (Grav 1.7.53 before 1.7.53.5 and 2.0.0-rc.8 before 2.2.2 contains a res ...)
-	TODO: check
+	NOT-FOR-US: Grav CMS
 CVE-2026-112781 (Grav from 2.0.0 before 2.2.2 contains an information disclosure vulner ...)
-	TODO: check
+	NOT-FOR-US: Grav CMS
 CVE-2026-112780 (Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: Grav CMS
 CVE-2026-112779 (Grav API plugin (grav-plugin-api) 1.0.40 before 1.0.42 caches a full t ...)
-	TODO: check
+	NOT-FOR-US: Grav plugin
 CVE-2026-112778 (Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespace va ...)
 	TODO: check
 CVE-2026-112777 (Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a blocklist ...)
@@ -315,29 +315,29 @@ CVE-2026-112390 (Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pi
 	NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-22hg-r758-rrw9
 	NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/26cb3ed061173b817b9ee4b6f507cb0e1e293218 (13.0.0)
 CVE-2026-112373 (A security vulnerability has been detected in H3C Magic NX15 NX15V100R ...)
-	TODO: check
+	NOT-FOR-US: H3C
 CVE-2026-112372 (A weakness has been identified in H3C Magic NX15 V100R017. This affect ...)
-	TODO: check
+	NOT-FOR-US: H3C
 CVE-2026-112371 (A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacte ...)
-	TODO: check
+	NOT-FOR-US: H3C
 CVE-2026-112370 (A vulnerability was found in H3C Magic NX15 100R017. This issue affect ...)
-	TODO: check
+	NOT-FOR-US: H3C
 CVE-2026-112361 (A vulnerability has been found in Dolibarr up to 23.0.2. The impacted  ...)
 	NOT-FOR-US: Dolibarr
 CVE-2026-112360 (A security vulnerability has been detected in Netis EAP930 1.250905.11 ...)
-	TODO: check
+	NOT-FOR-US: Netis
 CVE-2026-112358 (A weakness has been identified in TiBillet Lespass up to 10e87909c5d52 ...)
-	TODO: check
+	NOT-FOR-US: TiBillet Lespass
 CVE-2026-112302 (A weakness has been identified in kiwilan php-archive up to 2.3.02. Th ...)
-	TODO: check
+	NOT-FOR-US: kiwilan php-archive
 CVE-2026-112301 (A security flaw has been discovered in orbitale imagemagick-php up to  ...)
-	TODO: check
+	NOT-FOR-US: orbitale imagemagick-php
 CVE-2026-112300 (A vulnerability was identified in DiffSK configobj up to 5.0.9. Affect ...)
 	TODO: check
 CVE-2026-112299 (A vulnerability was determined in smrealms smr up to f40380c017bc35cd8 ...)
-	TODO: check
+	NOT-FOR-US: smrealms smr
 CVE-2026-112297 (A flaw has been found in ptbsare anx-calibre-manager up to 1.13.12. Th ...)
-	TODO: check
+	NOT-FOR-US: ptbsare anx-calibre-manager
 CVE-2026-112261 (A flaw was found in GIMP. Opening a crafted XCF that selects a path an ...)
 	TODO: check
 CVE-2026-112260 (A flaw was found in GIMP. Opening a crafted XCF with a malformed text- ...)
@@ -105952,9 +105952,9 @@ CVE-2026-43832 (Full details and mitigation steps are currently restricted and w
 CVE-2026-43831 (Full details and mitigation steps are currently restricted and will be ...)
 	TODO: check
 CVE-2026-43830 (Full details and mitigation steps are currently restricted and will be ...)
-	TODO: check
+	NOT-FOR-US: Advantech
 CVE-2026-43829 (Full details and mitigation steps are currently restricted and will be ...)
-	TODO: check
+	NOT-FOR-US: Advantech
 CVE-2026-38709 (TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300  ...)
 	NOT-FOR-US: Cudy
 CVE-2026-35847 (An issue in dnsmgr v.2.15 and before allows a local attacker to execut ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/146fc601f133b97378d17c4792e69541f8c937eb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/146fc601f133b97378d17c4792e69541f8c937eb
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261020/9ee50cd8/attachment.htm>
