[Git][security-tracker-team/security-tracker][master] NFUs

Fri Oct 23 23:41:04 BST 2026


Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b8543d73 by Moritz Muehlenhoff at 2026-10-24T00:38:32+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1784,13 +1784,13 @@ CVE-2026-104068 (JetBackup plugin for WordPress before 3.1.24.10 contains a syml
 CVE-2026-102785 (Joomla Extension - yootheme.com - Unauthenticated remote code executio ...)
 	NOT-FOR-US: Joomla
 CVE-2025-71434 (Weaver E-cology 8.0, 9.0, and 10.0 prior to 10.76 contains an unauthen ...)
-	TODO: check
+	NOT-FOR-US: Weaver E-cology
 CVE-2025-69723 (A reflected cross-site scripting (XSS) vulnerability in localstack v4. ...)
-	TODO: check
+	NOT-FOR-US: localstack
 CVE-2025-65200 (An issue was discovered in localstack 4.9.2 allowing attackers to exec ...)
-	TODO: check
+	NOT-FOR-US: localstack
 CVE-2024-58396 (YouDataSum CPAS Audit Management System V4 contains a path traversal v ...)
-	TODO: check
+	NOT-FOR-US: YouDataSum CPAS Audit Management
 CVE-2024-58394 (Retool before 3.88.0 contains a cross-site scripting vulnerability tha ...)
 	TODO: check
 CVE-2024-58393 (i-Netsolution Readymade Unilevel Ecommerce MLM (2024-03-15 build) cont ...)
@@ -5186,11 +5186,11 @@ CVE-2026-101808 (Vulnerability in the Oracle Product Workbench product of Oracle
 CVE-2026-101807 (Vulnerability in the Oracle Communications Billing and Revenue Managem ...)
 	NOT-FOR-US: Oracle
 CVE-2026-101806 (Vulnerability in the MySQL Connectors product of Oracle MySQL (compone ...)
-	TODO: check
+	NOT-FOR-US: MySQL Connector ODBC
 CVE-2026-101805 (Vulnerability in the Oracle Applications Manager product of Oracle E-B ...)
 	NOT-FOR-US: Oracle
 CVE-2026-101804 (Vulnerability in the MySQL Connectors product of Oracle MySQL (compone ...)
-	TODO: check
+	NOT-FOR-US: MySQL Connector ODBC
 CVE-2026-101803 (Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MyS ...)
 	- mysql-9.7 9.7.4-1 (bug #1151663)
 CVE-2026-101802 (Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MyS ...)
@@ -5262,7 +5262,7 @@ CVE-2026-101770 (Vulnerability in the MySQL Server, MySQL Cluster product of Ora
 CVE-2026-101769 (Vulnerability in the MySQL Cluster product of Oracle MySQL (component: ...)
 	NOT-FOR-US: Oracle
 CVE-2026-101768 (Vulnerability in the MySQL Connectors product of Oracle MySQL (compone ...)
-	TODO: check
+	- mysql-connector-java <removed>
 CVE-2026-101767 (Vulnerability in the Oracle Application Object Library product of Orac ...)
 	NOT-FOR-US: Oracle
 CVE-2026-101766 (Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MyS ...)
@@ -5438,9 +5438,9 @@ CVE-2026-101680 (Vulnerability in the Oracle Communications Billing and Revenue
 CVE-2026-101679 (Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MyS ...)
 	- mysql-9.7 9.7.4-1 (bug #1151663)
 CVE-2026-101678 (Vulnerability in the MySQL Connectors product of Oracle MySQL (compone ...)
-	TODO: check
+	- mysql-connector-java <removed>
 CVE-2026-101677 (Vulnerability in the MySQL Connectors product of Oracle MySQL (compone ...)
-	TODO: check
+	- mysql-connector-java <removed>
 CVE-2026-101676 (Vulnerability in the Oracle Concurrent Processing product of Oracle E- ...)
 	NOT-FOR-US: Oracle
 CVE-2026-101675 (Vulnerability in the Oracle Mobile Field Service product of Oracle E-B ...)
@@ -5534,9 +5534,9 @@ CVE-2026-101628 (Vulnerability in the MySQL Cluster product of Oracle MySQL (com
 CVE-2026-101627 (Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MyS ...)
 	- mysql-9.7 9.7.4-1 (bug #1151663)
 CVE-2026-101626 (Vulnerability in the MySQL Connectors product of Oracle MySQL (compone ...)
-	TODO: check
+	NOT-FOR-US: MySQL Connector Net
 CVE-2026-101625 (Vulnerability in the MySQL Connectors product of Oracle MySQL (compone ...)
-	TODO: check
+	NOT-FOR-US: MySQL Connector Net
 CVE-2026-101624 (Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MyS ...)
 	- mysql-9.7 9.7.4-1 (bug #1151663)
 CVE-2026-101623 (Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MyS ...)
@@ -7778,7 +7778,7 @@ CVE-2026-111844 (Improper Neutralization of Input During Web Page Generation ('C
 CVE-2026-111843 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-111767 (MCP TypeScript SDK is the official TypeScript SDK for Model Context Pr ...)
-	TODO: check
+	NOT-FOR-US: MCP TypeScript SDK
 CVE-2026-111765 (A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protoc ...)
 	NOT-FOR-US: A2A Java SDK
 CVE-2026-111764 (A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protoc ...)
@@ -23705,7 +23705,6 @@ CVE-2026-108578 (A vulnerability was identified in Neterbit NW-431F 20250715. Im
 	NOT-FOR-US: Neterbit
 CVE-2026-108577 (A vulnerability was determined in Konstanty Bialkowski libmodplug up t ...)
 	- libmodplug <undetermined>
-	TODO: check details for upstream
 CVE-2026-108576 (A vulnerability was found in TOZED X300 up to 6.01.3. This vulnerabili ...)
 	NOT-FOR-US: TOZED X300
 CVE-2026-108575 (A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This a ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b8543d7315ac6d7864a40b18b3d0b88416d49517

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b8543d7315ac6d7864a40b18b3d0b88416d49517
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261023/bd06dc8d/attachment-0001.htm>
