Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e9f539ca by Salvatore Bonaccorso at 2026-10-05T21:39:23+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -135,7 +135,7 @@ CVE-2026-39763 (Missing Authorization vulnerability in
Deepak Anand WP Dummy Con
CVE-2026-39721 (Missing Authorization vulnerability in Brainstorm Force
Starter Templa ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-37719 (An issue in dormakaba evolo Service (all versions) allows a
remote att ...)
- TODO: check
+ NOT-FOR-US: dormakaba
CVE-2026-28667 (In multiple functions of rw_t5t.cc, there is a possible
out-of-bounds ...)
NOT-FOR-US: Android
CVE-2026-28648 (In Settings, there is a possible permission bypass due to a
confused d ...)
@@ -153,7 +153,7 @@ CVE-2026-19185 (The system-call verifier for i3c_do_ccc()
in drivers/i3c/i3c_han
CVE-2026-19184 (The NXP GAU ADC driver (drivers/adc/adc_mcux_gau_adc.c)
validated the ...)
NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-12171 (auto-changelog before 2.6.1 merges configuration from inside
the targe ...)
- TODO: check
+ NOT-FOR-US: auto-changelog
CVE-2026-105712 (gpgtar in GnuPG before 2.5.19 can allow file overwrite via
crafted dat ...)
- gnupg2 <unfixed>
NOTE: https://static.dev.gnupg.org/T8159.html
@@ -170,53 +170,53 @@ CVE-2026-105643 (Ghost is a Node.js content management
system. From version 6.34
CVE-2026-105642 (Ghost is a Node.js content management system. From 6.56.0
until 6.67.0 ...)
- ghost <itp> (bug #892150)
CVE-2026-105641 (Plane is an open-source project management tool. Prior to
1.4.0, the d ...)
- TODO: check
+ NOT-FOR-US: Plane
CVE-2026-105640 (Plane is an open-source project management tool. Prior to
1.4.0, Plane ...)
- TODO: check
+ NOT-FOR-US: Plane
CVE-2026-105639 (Plane is an open-source project management tool. Prior to
1.4.0, Plane ...)
- TODO: check
+ NOT-FOR-US: Plane
CVE-2026-105638 (Plane is an open-source project management tool. Prior to
1.4.0, Plane ...)
- TODO: check
+ NOT-FOR-US: Plane
CVE-2026-105637 (Plane is an open-source project management tool. Prior to
1.4.0, Proje ...)
- TODO: check
+ NOT-FOR-US: Plane
CVE-2026-105636 (Plane is an open-source project management tool. Prior to
1.4.0, the w ...)
- TODO: check
+ NOT-FOR-US: Plane
CVE-2026-105635 (Plane is an open-source project management tool. Prior to
1.4.0, Proje ...)
- TODO: check
+ NOT-FOR-US: Plane
CVE-2026-105634 (Plane is an open-source project management tool. Prior to
1.3.0, the P ...)
- TODO: check
+ NOT-FOR-US: Plane
CVE-2026-105633 (Plane is an open-source project management tool. Prior to
1.4.0, the V ...)
- TODO: check
+ NOT-FOR-US: Plane
CVE-2026-105632 (Plane is an open-source project management tool. Prior to
1.4.0, the G ...)
- TODO: check
+ NOT-FOR-US: Plane
CVE-2026-105631 (Plane is an open-source project management tool. Prior to
1.4.0, Works ...)
- TODO: check
+ NOT-FOR-US: Plane
CVE-2026-105630 (Plane is an open-source project management tool. Prior to
1.4.0, an au ...)
- TODO: check
+ NOT-FOR-US: Plane
CVE-2026-105629 (Plane is an open-source project management tool. Prior to
1.4.0, BulkE ...)
- TODO: check
+ NOT-FOR-US: Plane
CVE-2026-105628 (Plane is an open-source project management tool. Prior to
1.4.0, Plane ...)
- TODO: check
+ NOT-FOR-US: Plane
CVE-2026-105421 (Missing Authorization vulnerability in Kit Kit (formerly
ConvertKit) f ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-105397 (LearnPress plugin for WordPress through 4.4.9.1 contains a
stored cros ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-105396 (Heym before v0.0.112 contains a token leakage vulnerability
in build_p ...)
- TODO: check
+ NOT-FOR-US: Heym
CVE-2026-105387 (A security flaw has been discovered in girishsaraf
Online-Appointment- ...)
- TODO: check
+ NOT-FOR-US: girishsaraf Online-Appointment-Booking-System
CVE-2026-105386 (A vulnerability was identified in onetwothreeneth
HospitalManagementSy ...)
- TODO: check
+ NOT-FOR-US: onetwothreeneth HospitalManagementSystem
CVE-2026-105385 (A vulnerability was determined in onetwothreeneth
HospitalManagementSy ...)
- TODO: check
+ NOT-FOR-US: onetwothreeneth HospitalManagementSystem
CVE-2026-105384 (A vulnerability was found in UNION HospitalManagementSystem
up to 9ef9 ...)
- TODO: check
+ NOT-FOR-US: UNION HospitalManagementSystem
CVE-2026-105383 (A vulnerability has been found in onetwothreeneth
HospitalManagementSy ...)
- TODO: check
+ NOT-FOR-US: onetwothreeneth HospitalManagementSystem
CVE-2026-105382 (A flaw has been found in onetwothreeneth
HospitalManagementSystem up t ...)
- TODO: check
+ NOT-FOR-US: onetwothreeneth HospitalManagementSystem
CVE-2026-105329 (A vulnerability was determined in TallCMS up to 4.8.0. This
affects an ...)
- TODO: check
+ NOT-FOR-US: TallCMS
CVE-2026-105326 (An argument injection flaw was found in CUPS. When email
notification ...)
TODO: check
CVE-2026-105315 (A vulnerability has been found in django-haystack up to
3.3.0. Affecte ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e9f539cac85a0724d0172624507f1f6038e01b13
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e9f539cac85a0724d0172624507f1f6038e01b13
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
