[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2b8583e3 by Moritz Muehlenhoff at 2026-09-29T23:08:11+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -54,8 +54,10 @@ CVE-2026-96428 (SQL Injection in the /WebAgenda/SMBAjaxAutoComplete.do API endpo
 CVE-2026-95520 (A heap-based buffer overflow flaw was found in rpm. Parsing a symlink  ...)
 	- rpm <unfixed>
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2537809
+CVE-2026-19395
+	NOT-FOR-US: Qt for MCUs
 CVE-2026-95509 (Strings optimized for Latin-1 displaying Latin-1 characters cause inco ...)
-	TODO: check
+	NOT-FOR-US: Qt for MCUs
 CVE-2026-94954 (A stack-based buffer overflow vulnerability exists in the web manageme ...)
 	NOT-FOR-US: TOTOLINK
 CVE-2026-93332 (Improper access control in the partial connection API in Devolutions S ...)
@@ -318,17 +320,17 @@ CVE-2026-102710 (Attacker model / Preconditions: a loaded `TXM_MODULE_USER_MODE
 CVE-2026-102709 (Improper validation of non-secure (NS) pointers in multiple TrustZone- ...)
 	NOT-FOR-US: Eclipse
 CVE-2026-102697 (Ollama versions 0.14.0 before 0.31.2 contain an incorrect authorizatio ...)
-	TODO: check
+	- ollama <itp> (bug #1094806)
 CVE-2026-102677 (Electron is a framework for writing cross-platform desktop application ...)
-	TODO: check
+	- electron <itp> (bug #842420)
 CVE-2026-102676 (Electron is a framework for writing cross-platform desktop application ...)
-	TODO: check
+	- electron <itp> (bug #842420)
 CVE-2026-102675 (Electron is a framework for writing cross-platform desktop application ...)
-	TODO: check
+	- electron <itp> (bug #842420)
 CVE-2026-102674 (Electron is a framework for writing cross-platform desktop application ...)
-	TODO: check
+	- electron <itp> (bug #842420)
 CVE-2026-102673 (Electron is a framework for writing cross-platform desktop application ...)
-	TODO: check
+	- electron <itp> (bug #842420)
 CVE-2026-102639 (MobilityDB version 1.3.0 and earlier contains an out-of-bounds read vu ...)
 	TODO: check
 CVE-2026-102635 (ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitializ ...)
@@ -350,11 +352,11 @@ CVE-2026-102600 (Socket.IO enables bidirectional and low-latency communication f
 CVE-2026-102598 (Werkzeug is a comprehensive WSGI web application library. Prior to 3.1 ...)
 	TODO: check
 CVE-2026-102570 (ClipBucket v5 through 5.5.3-#197 contains a time-based blind SQL injec ...)
-	TODO: check
+	NOT-FOR-US: ClipBucket
 CVE-2026-102569 (ClipBucket v5 through 5.5.3-#197 contains a time-based blind SQL injec ...)
-	TODO: check
+	NOT-FOR-US: ClipBucket
 CVE-2026-102568 (Pardus Parental Control before 0.7.0 contains an incorrect authorizati ...)
-	TODO: check
+	NOT-FOR-US: Pardus Parental Control
 CVE-2026-102567 (CTranslate2 before 4.8.1 contains an out-of-bounds heap read vulnerabi ...)
 	TODO: check
 CVE-2026-102566 (CTranslate2 before 4.8.1 contains a heap-based buffer overflow in the  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2b8583e3be66de4ba63e70f6696aca2e0d8a03ff

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2b8583e3be66de4ba63e70f6696aca2e0d8a03ff
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260929/ed8b6db3/attachment-0001.htm>