Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
3bae05c6 by Salvatore Bonaccorso at 2026-09-07T21:43:37+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -87,9 +87,9 @@ CVE-2026-86429 (The league/commonmark
(thephpleague/commonmark) library in versi
CVE-2026-86428 (commonmark versions from 1.5.0 before 2.10.0 contain a denial
of servi ...)
TODO: check
CVE-2026-86427 (LibreNMS before 26.8.0 contains an argument injection
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: LibreNMS
CVE-2026-86426 (LibreNMS before 26.8.0 contains an authentication bypass
vulnerability ...)
- TODO: check
+ NOT-FOR-US: LibreNMS
CVE-2026-86425 (ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55
contains a heap ...)
TODO: check
CVE-2026-86424 (ImageMagick before 7.1.2-30 and 6.9.13-55 contains a
time-of-check-tim ...)
@@ -109,7 +109,7 @@ CVE-2026-86418 (Affected versions of MISP expose
organisation metadata through t
CVE-2026-86417 (Affected versions of MISP inconsistently enforced
email-address visibi ...)
- misp <itp> (bug #1144317)
CVE-2026-86416 (ILIAS versions before 9.23, 10.11, and 11.4 contain an
authorization b ...)
- TODO: check
+ NOT-FOR-US: ILIAS
CVE-2026-86408 (Affected versions of MISP do not enforce parent-event
visibility when ...)
- misp <itp> (bug #1144317)
CVE-2026-86404 (EAP's Artemis deserialization configuration permits
deserialization by ...)
@@ -121,7 +121,7 @@ CVE-2026-86347 (Affected versions of MISP allow any
authenticated user to access
CVE-2026-86342 (Affected versions of MISP contain improper authorization
checks in the ...)
- misp <itp> (bug #1144317)
CVE-2026-86332 (A flaw was found in odh-dashboard in Red Hat OpenShift AI. The
backend ...)
- TODO: check
+ NOT-FOR-US: Red Hat OpenShift AI
CVE-2026-86321 (A vulnerability was found in java-json-tools jackson-coreutils
2.0. Af ...)
TODO: check
CVE-2026-86319 (A vulnerability has been found in java-json-tools json-patch
up to 1.1 ...)
@@ -135,13 +135,13 @@ CVE-2026-86310 (A vulnerability has been found in
itsourcecode Sales and Invento
CVE-2026-86309 (A flaw has been found in itsourcecode Sales and Inventory
System 1.0. ...)
NOT-FOR-US: itsourcecode System
CVE-2026-86308 (A vulnerability was detected in light0011 cms
c774dce31c6df0055568a8d5 ...)
- TODO: check
+ NOT-FOR-US: light0011 cms
CVE-2026-86307 (A security vulnerability has been detected in light0011 cms
c774dce31c ...)
- TODO: check
+ NOT-FOR-US: light0011 cms
CVE-2026-86306 (A weakness has been identified in light0011 cms
c774dce31c6df0055568a8 ...)
- TODO: check
+ NOT-FOR-US: light0011 cms
CVE-2026-86305 (A security flaw has been discovered in light0011 cms
c774dce31c6df0055 ...)
- TODO: check
+ NOT-FOR-US: light0011 cms
CVE-2026-86303 (A vulnerability was determined in 92181 markdown up to
058cab0cb7fb245 ...)
TODO: check
CVE-2026-86302 (A vulnerability was found in code-projects Hospital
Information System ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3bae05c60048b0de430c823efcf9a755c2206d74
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3bae05c60048b0de430c823efcf9a755c2206d74
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
