[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
144f393b by Salvatore Bonaccorso at 2026-09-28T22:15:43+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -30,39 +30,39 @@ CVE-2026-94283 (An out-of-bounds read vulnerability in libX11's XIM (X Input Met
 	- libx11 <unfixed>
 	NOTE: https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/310
 CVE-2026-94194 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response S ...)
-	TODO: check
+	NOT-FOR-US: elixir-mint Mint
 CVE-2026-93540 (A privilege mismatch was found in Fleet. When a bundle requested names ...)
-	TODO: check
+	NOT-FOR-US: Fleet
 CVE-2026-93539 (A vulnerability was discovered in Fleet's Git webhook receiver (the gi ...)
-	TODO: check
+	NOT-FOR-US: Fleet
 CVE-2026-93538 (A cross-tenant authorization issue was discovered in SUSE Rancher Flee ...)
-	TODO: check
+	NOT-FOR-US: SUSE Rancher Fleet
 CVE-2026-93537 (A user who can supply bundle content to a repository referenced by a G ...)
-	TODO: check
+	NOT-FOR-US: SUSE Rancher Fleet
 CVE-2026-93348 (Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsl ...)
-	TODO: check
+	NOT-FOR-US: Unsloth Zoo
 CVE-2026-92103 (Allocation of Resources Without Limits or Throttling vulnerability in  ...)
-	TODO: check
+	NOT-FOR-US: elixir-mint Mint
 CVE-2026-91206 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-91204 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-91154 (Missing Authentication for Critical Function (CWE-306) in the product  ...)
-	TODO: check
+	NOT-FOR-US: MarcosCamara01 Ecommerce Template
 CVE-2026-91043 (Allocation of Resources Without Limits or Throttling vulnerability in  ...)
-	TODO: check
+	NOT-FOR-US: elixir-mint Mint
 CVE-2026-90926 (Improper Control of Generation of Code ('Code Injection') vulnerabilit ...)
-	TODO: check
+	NOT-FOR-US: Logsign SIEM
 CVE-2026-90925 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
-	TODO: check
+	NOT-FOR-US: Logsign SIEM
 CVE-2026-90924 (Use of default credentials vulnerability in Innotim Software, Telecomm ...)
-	TODO: check
+	NOT-FOR-US: Logsign SIEM
 CVE-2026-88808 (A vulnerability has been identified within Rancher Manager where the F ...)
-	TODO: check
+	NOT-FOR-US: SUSE Rancher Fleet
 CVE-2026-88805 (Incorrect credential cleaning on logout could be used by remote attack ...)
-	TODO: check
+	NOT-FOR-US: SUSE Rancher Fleet
 CVE-2026-88804 (An unauthenticated update of public UI settings could be used by remot ...)
-	TODO: check
+	NOT-FOR-US: SUSE Rancher Fleet
 CVE-2026-87969 (An OS command injection vulnerability in the WatchGuard AP diagnostic  ...)
 	NOT-FOR-US: WatchGuard
 CVE-2026-87799 (Improper link resolution in the migration receive path in Canonical LX ...)
@@ -72,9 +72,9 @@ CVE-2026-87798 (Improper link resolution in the recursive file pull feature of t
 	- lxd <removed>
 	NOTE: https://github.com/canonical/lxd/security/advisories/GHSA-mr8v-hx34-hfvf
 CVE-2026-87752 (Improper neutralization of input during web page generation ('cross-si ...)
-	TODO: check
+	NOT-FOR-US: Agentis
 CVE-2026-87114 (A flaw was found in kube-compare. When processing a 'container://' ref ...)
-	TODO: check
+	NOT-FOR-US: kube-compare
 CVE-2026-86595 (Improper neutralization of special elements used in an SQL command ('S ...)
 	TODO: check
 CVE-2026-86530 (BUFFALO Wi-Fi products handle some web form input improperly to assemb ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/144f393ba969f0d12a863035a8f6bff2b8360dfc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/144f393ba969f0d12a863035a8f6bff2b8360dfc
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260928/b5d3d2b2/attachment.htm>