[Git][security-tracker-team/security-tracker][master] Process some NFUs

Tue Oct 20 15:02:41 BST 2026


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
90d63b57 by Salvatore Bonaccorso at 2026-10-20T16:01:44+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -362,9 +362,9 @@ CVE-2026-112257 (A flaw was found in GIMP. The PSD thumbnail resource loader per
 	NOTE: https://gitlab.gnome.org/GNOME/gimp/-/work_items/16862
 	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/gimp/-/commit/b89635399d4b92f0b2872c627ef5966583603537 (gimp-3-2 branch)
 CVE-2026-112254 (A vulnerability was found in agit8or1 clientst0r up to 3.17.586. Affec ...)
-	TODO: check
+	NOT-FOR-US: agit8or1 clientst0r
 CVE-2026-112148 (A vulnerability has been identified in LIFF SDK versions 2.20.0 throug ...)
-	TODO: check
+	NOT-FOR-US: LIFF SDK
 CVE-2026-111766 (markdown-it is a Markdown parser. Prior to 14.3.3 and 15.0.3, when the ...)
 	- node-markdown-it <unfixed>
 	NOTE: https://github.com/markdown-it/markdown-it/security/advisories/GHSA-vfgh-jcmw-g37q
@@ -378,15 +378,15 @@ CVE-2026-110095 (fast-uri is a dependency-free RFC 3986 URI parser and serialize
 CVE-2026-109831 (UnRTF by GNU Project is vulnerable to out-of-bounds write. If a user o ...)
 	TODO: check
 CVE-2026-109444 (OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulner ...)
-	TODO: check
+	NOT-FOR-US: OpenSRE
 CVE-2026-109443 (JoySafeter through 1.0.0 contains a remote code execution vulnerabilit ...)
-	TODO: check
+	NOT-FOR-US: JoySafeter
 CVE-2026-109442 (piflow 2.0.0 through 2.0.1 contains a remote code execution vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: piflow
 CVE-2026-109441 (LangAlpha through 2026.09.07 contains an improper isolation vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: LangAlpha
 CVE-2026-109440 (LangAlpha through 2026.09.07 contains an indirect prompt injection vul ...)
-	TODO: check
+	NOT-FOR-US: LangAlpha
 CVE-2026-109395 (Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access ...)
 	TODO: check
 CVE-2026-109126 (IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10. ...)
@@ -402,15 +402,15 @@ CVE-2026-105814 (TP-Link Tapo C210 V3.60 contains an authentication bypass vulne
 CVE-2026-105453 (IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and6.4.0. ...)
 	NOT-FOR-US: IBM
 CVE-2026-105299 (Summary    Before version 0.9.0, the HTTP/1 upstream path in pingora-p ...)
-	TODO: check
+	NOT-FOR-US: Pingora
 CVE-2026-105298 (Summary    Before version 0.9.0, Pingora accepted HTTP/2 requests whos ...)
-	TODO: check
+	NOT-FOR-US: Pingora
 CVE-2026-105297 (Summary    Before version 0.8.1, Pingora's HTTP/2 server used the h2 c ...)
-	TODO: check
+	NOT-FOR-US: Pingora
 CVE-2026-102438 (An uncontrolled search path element vulnerability in ASUS Armoury Crat ...)
 	NOT-FOR-US: ASUS
 CVE-2026-100737 (Hidden functionality issue exists in Multiple DVRs (Digital Video Reco ...)
-	TODO: check
+	NOT-FOR-US: Atsumi
 CVE-2025-36252 (IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Li ...)
 	NOT-FOR-US: IBM
 CVE-2025-36069 (IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidat ...)
@@ -105966,11 +105966,11 @@ CVE-2026-54715 (GoAccess is a real-time web log analyzer and interactive viewer
 CVE-2026-52539 (Outstatic CMS <= 2.1.9 contains a hardcoded JWT signing secret. When t ...)
 	NOT-FOR-US: Outstatic CMS
 CVE-2026-43833 (Full details and mitigation steps are currently restricted and will be ...)
-	TODO: check
+	NOT-FOR-US: Advantech
 CVE-2026-43832 (Full details and mitigation steps are currently restricted and will be ...)
-	TODO: check
+	NOT-FOR-US: Advantech
 CVE-2026-43831 (Full details and mitigation steps are currently restricted and will be ...)
-	TODO: check
+	NOT-FOR-US: Advantech
 CVE-2026-43830 (Full details and mitigation steps are currently restricted and will be ...)
 	NOT-FOR-US: Advantech
 CVE-2026-43829 (Full details and mitigation steps are currently restricted and will be ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/90d63b5746559215d213b152911d9ffee09c016e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/90d63b5746559215d213b152911d9ffee09c016e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261020/885e91d8/attachment.htm>
