[Git][security-tracker-team/security-tracker][master] Process some new NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e1812598 by Salvatore Bonaccorso at 2026-10-28T20:41:07+01:00
Process some new NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -85,7 +85,7 @@ CVE-2026-86377 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0
 CVE-2026-85655 (The Enable Media Replace plugin for WordPress is vulnerable to authori ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-84725 (when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attack ...)
-	TODO: check
+	NOT-FOR-US: Red Hat JBoss Enterprise Application Platform
 CVE-2026-83525 (Incorrect operator (CWE-480) in the FetchSnapshot RPC handler in Apach ...)
 	- kafka <itp> (bug #786460)
 CVE-2026-82962 (ethernet_fill_header() in subsys/net/l2/ethernet/ethernet.c can prepen ...)
@@ -97,9 +97,9 @@ CVE-2026-81472 (Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service
 CVE-2026-79656 (A user with read access to Grafana's server logs, or to a log store th ...)
 	NOT-FOR-US: Grafana
 CVE-2026-6064 (Link following vulnerability in Data Shredder components in Norton Ant ...)
-	TODO: check
+	NOT-FOR-US: Norton Antivirus, Avast Antivirus, and AVG Internet Security
 CVE-2026-67187 (Ninja Forms plugin for WordPress before 3.15.4 contains an incomplete  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-67080 (HCL BigFix AEX is affected by an Information Disclosure vulnerability  ...)
 	NOT-FOR-US: HCL
 CVE-2026-67079 (HCL BigFix AEX is affected by a Clickjacking vulnerability, which coul ...)
@@ -111,7 +111,7 @@ CVE-2026-67074 (HCL BigFix AEX is affected by a Remote Code Execution Vulnerabil
 CVE-2026-67073 (HCL BigFix AEX is affected by an Unrestricted File Upload and Improper ...)
 	NOT-FOR-US: HCL
 CVE-2026-59979 (YosemiteCrew provides organization-based service and task management.  ...)
-	TODO: check
+	NOT-FOR-US: YosemiteCrew
 CVE-2026-59959 (SAIL is a cross-platform library for loading and saving images with su ...)
 	TODO: check
 CVE-2026-59185 (identrail is a machine identity security platform for AWS, GitHub/OIDC ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e1812598e28e4f39f24ae0d5d231646653ece3fc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e1812598e28e4f39f24ae0d5d231646653ece3fc
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261028/729904c9/attachment.htm>