[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9940cf7c by Salvatore Bonaccorso at 2026-10-28T07:50:09+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -179,9 +179,9 @@ CVE-2026-65211 (This issue may allow an authenticated IPMI Administrator to read
 CVE-2026-65210 (This issue may allow an authenticated IPMI Administrator to read arbit ...)
 	NOT-FOR-US: Supermicro
 CVE-2026-65151 (NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker cou ...)
-	TODO: check
+	NOT-FOR-US: NVIDIA
 CVE-2026-65145 (NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker co ...)
-	TODO: check
+	NOT-FOR-US: NVIDIA
 CVE-2026-65120 (NVIDIA TensorRT-LLM contains a vulnerability where an attacker could c ...)
 	NOT-FOR-US: NVIDIA
 CVE-2026-65119 (NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCac ...)
@@ -231,7 +231,7 @@ CVE-2026-48379 (Substance3D - Painter is affected by a Stack-based Buffer Overfl
 CVE-2026-48360 (Adobe Connect is affected by an Improper Control of Generation of Code ...)
 	NOT-FOR-US: Adobe
 CVE-2026-47486 (NVIDIA PhysX for all platforms contains a vulnerability where an attac ...)
-	TODO: check
+	NOT-FOR-US: NVIDIA
 CVE-2026-41022 (Eaton easySoft improperly validates TLS certificates presented by easy ...)
 	NOT-FOR-US: Eaton
 CVE-2026-41021 (Eaton easyE4 uses an insufficiently strong password policy. An attacke ...)
@@ -1368,7 +1368,7 @@ CVE-2026-117860 (Same-origin policy bypass in the DOM: Navigation component. Thi
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117860
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117860
 CVE-2026-117604 (Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in ...)
-	TODO: check
+	NOT-FOR-US: Grav CMS
 CVE-2026-117603 (Electrum before 4.7.2 contains a spending limit bypass vulnerability i ...)
 	TODO: check
 CVE-2026-117602 (Electrum 4.6.0 before 4.7.2 contains an authorization bypass in the ex ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9940cf7c3d75c3525592569a79870895fab3047b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9940cf7c3d75c3525592569a79870895fab3047b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261028/c6517da6/attachment-0001.htm>