[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
166f3d2d by Moritz Muehlenhoff at 2026-09-16T12:44:19+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,6 @@
+CVE-2026-92000
+	NOT-FOR-US: Node adm-zip
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2026-92000
 CVE-2026-89792 [ksmbd: prevent out-of-bounds reads in share config responses]
 	- linux <unfixed>
 	NOTE: https://git.kernel.org/linus/f25e93768fcc5d8287e50b1ec52a42e4c276df34 (7.3-rc2)
@@ -2642,7 +2645,7 @@ CVE-2026-61701 (Laravel MagicLink creates links for authentication without a pas
 CVE-2026-61534 (Yayson is a library for serializing and reading JSON API data in JavaS ...)
 	NOT-FOR-US: Yayson
 CVE-2026-5132 (Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7 ...)
-	TODO: check
+	- mattermost-server <itp> (bug #823556)
 CVE-2026-59960 (Argos JavaScript provides official Argos SDKs for JavaScript. Prior to ...)
 	NOT-FOR-US: Argos JavaScript
 CVE-2026-59570 (On affected versions of Zscaler client connector, a pre-installed peer ...)
@@ -2818,36 +2821,36 @@ CVE-2026-15923 (The Zephyr SDIO subsystem function sdio_io_rw_extended_helper()
 CVE-2026-15893 (net_if_ipv6_calc_reachable_time() in subsys/net/ip/net_if.c derives a  ...)
 	NOT-FOR-US: Zephyr, different from src:zephyr
 CVE-2026-15814 (Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7 ...)
-	TODO: check
+	- mattermost-server <itp> (bug #823556)
 CVE-2026-15600 (Alior Bank PrestaShop module "raty" for commercial partners is vulnera ...)
-	TODO: check
+	NOT-FOR-US: PrestaShop module
 CVE-2026-14344 (Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7 ...)
-	TODO: check
+	- mattermost-server <itp> (bug #823556)
 CVE-2026-14259 (Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7 ...)
-	TODO: check
+	- mattermost-server <itp> (bug #823556)
 CVE-2026-13417 (Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7 ...)
-	TODO: check
+	- mattermost-server <itp> (bug #823556)
 CVE-2026-12985 (Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7 ...)
-	TODO: check
+	- mattermost-server <itp> (bug #823556)
 CVE-2026-12882 (Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7 ...)
-	TODO: check
+	- mattermost-server <itp> (bug #823556)
 CVE-2026-12518 (A local privilege escalation vulnerability in the Logitech Logi Option ...)
 	TODO: check
 CVE-2026-12258 (Inadequate access control in Hiperdino\u2019s REST v1.0 API. The publi ...)
-	TODO: check
+	NOT-FOR-US: Hiperdino
 CVE-2026-11993 (Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7 ...)
-	TODO: check
+	- mattermost-server <itp> (bug #823556)
 CVE-2026-10556 (Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7 ...)
-	TODO: check
+	- mattermost-server <itp> (bug #823556)
 CVE-2026-10542 (Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7 ...)
-	TODO: check
+	- mattermost-server <itp> (bug #823556)
 CVE-2025-24890 (gitoxide is an implementation of git written in Rust. Prior to 0.13.3, ...)
 	- rust-gix-sec <not-affected> (Windows-specific)
 	NOTE: https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-7rhf-42qf-vrvc
 	NOTE: https://github.com/GitoxideLabs/gitoxide/pull/2510
 	NOTE: https://github.com/GitoxideLabs/gitoxide/commit/39e37482d6f884bf4765dbe9c95a93dc2a92e559
 CVE-2024-58383 (Froxlor before 2.2.0 (affected up to and including 2.2.0-rc3) generate ...)
-	TODO: check
+	- froxlor <itp> (bug #581792)
 CVE-2026-19624 (A flaw was found in NetworkManager-l2tp. The plugin writes attacker-co ...)
 	{DSA-6498-1}
 	- network-manager-l2tp 1.52.6-1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/166f3d2dbfb54f1f0a8adaf296a9dea4fd247182

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/166f3d2dbfb54f1f0a8adaf296a9dea4fd247182
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260916/e76eed75/attachment.htm>