[Git][security-tracker-team/security-tracker][master] Process two NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fe278728 by Salvatore Bonaccorso at 2026-10-21T08:57:31+02:00
Process two NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -11,7 +11,7 @@ CVE-2026-113812
 	NOTE: Debian's libmozilla-ca-perl is patched to use the system ca-certificates
 	NOTE: provided certificates.
 CVE-2026-9589 (Missing authorization in the configuration cascade operations of the C ...)
-	TODO: check
+	NOT-FOR-US: Unblu
 CVE-2026-97406 (XERJ Console API bearer tokens can bypass the passkey\u2011only authen ...)
 	TODO: check
 CVE-2026-97400 (In Eclipse OpenJ9 versions up to 0.63, opening a supplied diagnostic d ...)
@@ -97,7 +97,7 @@ CVE-2026-88041 (Incomplete cleanup vulnerability in Apache Tomcat allowed an tra
 CVE-2026-86471 (An unvalidated runtime configuration value in Apache CouchDB 3.5.2 and ...)
 	TODO: check
 CVE-2026-85267 (A Cross-Site WebSocket Hijacking vulnerability in Cloud Shell prior to ...)
-	TODO: check
+	NOT-FOR-US: Google Cloud Platform
 CVE-2026-80353 (Time-of-check time-of-use (TOCTOU) race condition vulnerability in Apa ...)
 	- tomcat9 9.0.70-2
 	NOTE: Starting with 9.0.70-2 src:tomcat9 no longer ships the server stack, using that as the fixed version



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fe278728d276efb2f00a07733356b0547e03d5d2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fe278728d276efb2f00a07733356b0547e03d5d2
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261021/18f8d7f0/attachment.htm>