[Git][security-tracker-team/security-tracker][master] Process two NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Mon Sep 28 20:44:47 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
75ad039d by Salvatore Bonaccorso at 2026-09-28T21:44:37+02:00
Process two NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -10,9 +10,9 @@ CVE-2026-97335 (Incorrect authorization in the custom storage volume creation en
 CVE-2026-96740 (A flaw was found in the StreamsHub Console for Apache Kafka. Tenant-su ...)
 	TODO: check
 CVE-2026-96538 (WarehousePG (WHPG) 7.x before 7.6.0-WHPG is affected by a missing auth ...)
-	TODO: check
+	NOT-FOR-US: WarehousePG (WHPG)
 CVE-2026-95104 (Stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi prod ...)
-	TODO: check
+	NOT-FOR-US: BUFFALO
 CVE-2026-94287 (A denial of service via unsigned underflow in libXpm's write path in l ...)
 	TODO: check
 CVE-2026-94286 (An out-of-bounds read in libXtst's RECORD reply parser in libXtst befo ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/75ad039d660b48423dcc1a7425d121160106008d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/75ad039d660b48423dcc1a7425d121160106008d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260928/34ca438f/attachment.htm>


More information about the debian-security-tracker-commits mailing list