Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6eaaf43f by Salvatore Bonaccorso at 2026-09-10T21:37:21+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3,11 +3,11 @@ CVE-2026-9338 (IBM WebSphere Application Server 9.0, and 8.5
is vulnerable to a
CVE-2026-9336 (IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to
a denia ...)
NOT-FOR-US: IBM
CVE-2026-9166 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
- TODO: check
+ NOT-FOR-US: GisLab Laboratory Management System
CVE-2026-9163 (Improper neutralization of special elements used in an SQL
command ('S ...)
- TODO: check
+ NOT-FOR-US: GisLab Laboratory Management System
CVE-2026-9161 (Observable response discrepancy vulnerability in DernekPlus
Website Te ...)
- TODO: check
+ NOT-FOR-US: DernekPlus
CVE-2026-8323 (URL redirection to untrusted site ('open redirect')
vulnerability in A ...)
TODO: check
CVE-2026-89049 (A server-side request forgery issue due to improper validation
of equi ...)
@@ -19,19 +19,19 @@ CVE-2026-89045 (zstd-jni versions 1.4.8-4 through 1.5.7-13
fail to validate nega
CVE-2026-89044 (Netty versions 4.1.133.Final through 4.1.137.Final and
4.2.13.Final th ...)
TODO: check
CVE-2026-89043 (passport-saml-encrypted through 0.1.13 contains an XML
signature wrapp ...)
- TODO: check
+ NOT-FOR-US: passport-saml-encrypted
CVE-2026-89042 (passport-saml-encrypted through 0.1.13 makes SAML signature
verificati ...)
- TODO: check
+ NOT-FOR-US: passport-saml-encrypted
CVE-2026-88959 (Anchor CMS through 0.12.7 fails to enforce role-based access
control i ...)
- TODO: check
+ NOT-FOR-US: Anchor CMS
CVE-2026-88940 (knowns through 0.33.0 fails to validate the path query
parameter in th ...)
- TODO: check
+ NOT-FOR-US: knowns-dev/knowns
CVE-2026-88939 (knowns through 0.33.0 exempts the project.set action from
permission g ...)
- TODO: check
+ NOT-FOR-US: knowns-dev/knowns
CVE-2026-88938 (knowns through 0.33.0 fails to confine the path argument of
the code.f ...)
- TODO: check
+ NOT-FOR-US: knowns-dev/knowns
CVE-2026-88937 (knowns through 0.33.0 fails to properly validate template
destination ...)
- TODO: check
+ NOT-FOR-US: knowns-dev/knowns
CVE-2026-88924 (A flaw was found in the admin backend of gvfs. The privileged
gvfsd-ad ...)
TODO: check
CVE-2026-88921 (MISP contains an HTML injection vulnerability in the
MISPElementHTMLFo ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6eaaf43fab78c5f390fe1552012109b71d4826a8
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6eaaf43fab78c5f390fe1552012109b71d4826a8
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
