Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
144f393b by Salvatore Bonaccorso at 2026-09-28T22:15:43+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -30,39 +30,39 @@ CVE-2026-94283 (An out-of-bounds read vulnerability in
libX11's XIM (X Input Met
- libx11 <unfixed>
NOTE:
https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/310
CVE-2026-94194 (Inconsistent Interpretation of HTTP Requests ('HTTP
Request/Response S ...)
- TODO: check
+ NOT-FOR-US: elixir-mint Mint
CVE-2026-93540 (A privilege mismatch was found in Fleet. When a bundle
requested names ...)
- TODO: check
+ NOT-FOR-US: Fleet
CVE-2026-93539 (A vulnerability was discovered in Fleet's Git webhook receiver
(the gi ...)
- TODO: check
+ NOT-FOR-US: Fleet
CVE-2026-93538 (A cross-tenant authorization issue was discovered in SUSE
Rancher Flee ...)
- TODO: check
+ NOT-FOR-US: SUSE Rancher Fleet
CVE-2026-93537 (A user who can supply bundle content to a repository
referenced by a G ...)
- TODO: check
+ NOT-FOR-US: SUSE Rancher Fleet
CVE-2026-93348 (Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented
in Unsl ...)
- TODO: check
+ NOT-FOR-US: Unsloth Zoo
CVE-2026-92103 (Allocation of Resources Without Limits or Throttling
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: elixir-mint Mint
CVE-2026-91206 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-91204 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-91154 (Missing Authentication for Critical Function (CWE-306) in the
product ...)
- TODO: check
+ NOT-FOR-US: MarcosCamara01 Ecommerce Template
CVE-2026-91043 (Allocation of Resources Without Limits or Throttling
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: elixir-mint Mint
CVE-2026-90926 (Improper Control of Generation of Code ('Code Injection')
vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: Logsign SIEM
CVE-2026-90925 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
- TODO: check
+ NOT-FOR-US: Logsign SIEM
CVE-2026-90924 (Use of default credentials vulnerability in Innotim Software,
Telecomm ...)
- TODO: check
+ NOT-FOR-US: Logsign SIEM
CVE-2026-88808 (A vulnerability has been identified within Rancher Manager
where the F ...)
- TODO: check
+ NOT-FOR-US: SUSE Rancher Fleet
CVE-2026-88805 (Incorrect credential cleaning on logout could be used by
remote attack ...)
- TODO: check
+ NOT-FOR-US: SUSE Rancher Fleet
CVE-2026-88804 (An unauthenticated update of public UI settings could be used
by remot ...)
- TODO: check
+ NOT-FOR-US: SUSE Rancher Fleet
CVE-2026-87969 (An OS command injection vulnerability in the WatchGuard AP
diagnostic ...)
NOT-FOR-US: WatchGuard
CVE-2026-87799 (Improper link resolution in the migration receive path in
Canonical LX ...)
@@ -72,9 +72,9 @@ CVE-2026-87798 (Improper link resolution in the recursive
file pull feature of t
- lxd <removed>
NOTE:
https://github.com/canonical/lxd/security/advisories/GHSA-mr8v-hx34-hfvf
CVE-2026-87752 (Improper neutralization of input during web page generation
('cross-si ...)
- TODO: check
+ NOT-FOR-US: Agentis
CVE-2026-87114 (A flaw was found in kube-compare. When processing a
'container://' ref ...)
- TODO: check
+ NOT-FOR-US: kube-compare
CVE-2026-86595 (Improper neutralization of special elements used in an SQL
command ('S ...)
TODO: check
CVE-2026-86530 (BUFFALO Wi-Fi products handle some web form input improperly
to assemb ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/144f393ba969f0d12a863035a8f6bff2b8360dfc
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/144f393ba969f0d12a863035a8f6bff2b8360dfc
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
