[Git][security-tracker-team/security-tracker][master] Process two NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d7f2d822 by Salvatore Bonaccorso at 2026-09-04T10:15:12+02:00
Process two NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -161,9 +161,9 @@ CVE-2026-85063 (node-csv is a full-featured CSV parser with a simple API that is
 	NOTE: https://github.com/adaltas/node-csv/pull/497
 	NOTE: Fixed by: https://github.com/adaltas/node-csv/commit/eb4d1484589c976dcb977db8dd0b90e015a6f66e
 CVE-2026-85062 (Colord is a tiny yet powerful tool for high-performance color manipula ...)
-	TODO: check
+	NOT-FOR-US: Colord (not same as src:colord)
 CVE-2026-85061 (MapLibre GL JS is an interactive vector tile map library for web brows ...)
-	TODO: check
+	NOT-FOR-US: MapLibre GL JS
 CVE-2026-85053 (Improper resource exposure in CacheStorage in Google Chrome prior to 1 ...)
 	- chromium <unfixed>
 CVE-2026-85052 (Out of bounds read in CrashReporting in Google Chrome prior to 152.0.7 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d7f2d82294149de54ae52614b76b67b1549948ba

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d7f2d82294149de54ae52614b76b67b1549948ba
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260904/ec2cc171/attachment-0001.htm>