Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0538f66b by Salvatore Bonaccorso at 2026-09-12T21:41:33+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3,7 +3,7 @@ CVE-2026-90560 (zstd-jni versions 1.2.0 through 1.5.7-13
contain an out-of-bound
NOTE: https://github.com/luben/zstd-jni/issues/405
NOTE: Fixed by:
https://github.com/luben/zstd-jni/commit/b74ab242d640c40897e62aab4c744ddfad1f915f
(v1.5.7-14)
CVE-2026-90559 (snappy-java through 1.1.10.8 contains an out-of-bounds write
vulnerabi ...)
- TODO: check
+ NOT-FOR-US: snappy-java
CVE-2026-90558 (sngrep through 1.8.4 contains stack buffer overflow
vulnerabilities in ...)
- sngrep <unfixed>
NOTE: Fixed by:
https://github.com/irontec/sngrep/commit/1ff74ee3ab5ff280e8ba976aa8c744dca57eb35b
@@ -14,39 +14,39 @@ CVE-2026-90554 (vLLM versions >=0.10.2 and <0.28.0 do not
apply any audio decode
CVE-2026-90553 (vLLM before 0.28.0 contains a remote code execution
vulnerability in t ...)
TODO: check
CVE-2026-90552 (WWBN AVideo through commit
c3edcc274c389816d434acadac07ee78eaf330c1 fa ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-90551 (WWBN AVideo through commit
c3edcc274c389816d434acadac07ee78eaf330c1 fa ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-90550 (WWBN AVideo through commit
c3edcc274c389816d434acadac07ee78eaf330c1 fa ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-90549 (WWBN AVideo through commit
c3edcc274c389816d434acadac07ee78eaf330c1 fa ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-90548 (WWBN AVideo through commit
c3edcc274c389816d434acadac07ee78eaf330c1 fa ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-90547 (WWBN AVideo through commit
c3edcc274c389816d434acadac07ee78eaf330c1 fa ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-90546 (WWBN AVideo through commit
c3edcc274c389816d434acadac07ee78eaf330c1 fa ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-90545 (WWBN AVideo through commit
c3edcc274c389816d434acadac07ee78eaf330c1 fa ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-90544 (WWBN AVideo through commit
c3edcc274c389816d434acadac07ee78eaf330c1 fa ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-90543 (WWBN AVideo at commit c3edcc274c389816d434acadac07ee78eaf330c1
and ear ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-90542 (WWBN AVideo through commit
c3edcc274c389816d434acadac07ee78eaf330c1 fa ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-90541 (WWBN AVideo through commit
c3edcc274c389816d434acadac07ee78eaf330c1 fa ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-90540 (WWBN AVideo through commit
c3edcc274c389816d434acadac07ee78eaf330c1 fa ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-90539 (WWBN AVideo through commit
c3edcc274c389816d434acadac07ee78eaf330c1 co ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-90538 (WWBN AVideo through commit
c3edcc274c389816d434acadac07ee78eaf330c1 co ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-90537 (WWBN AVideo through commit
c3edcc274c389816d434acadac07ee78eaf330c1 co ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-90536 (WWBN AVideo through commit
c3edcc274c389816d434acadac07ee78eaf330c1 fa ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-90535 (Flowise versions before 3.1.4 contain an unauthenticated
denial of ser ...)
NOT-FOR-US: Flowise
CVE-2026-90534 (Flowise is a low-code platform for building LLM applications.
In versi ...)
@@ -54,7 +54,7 @@ CVE-2026-90534 (Flowise is a low-code platform for building
LLM applications. In
CVE-2026-90533 (Flowise before 3.1.4 contains a broken access control
vulnerability in ...)
NOT-FOR-US: Flowise
CVE-2026-90474 (MCPHub before 1.0.32 contains an authentication bypass
vulnerability i ...)
- TODO: check
+ NOT-FOR-US: MCPHub
CVE-2026-90473 (msgpack-java through 0.9.12 contains an integer overflow
vulnerability ...)
TODO: check
CVE-2026-90472 (msgpack-java through 0.9.12 contains a stack overflow
vulnerability in ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0538f66bf30ce47a72ef31f3b1e9a6a331ada2e5
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0538f66bf30ce47a72ef31f3b1e9a6a331ada2e5
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
