Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a4291bee by Salvatore Bonaccorso at 2026-10-07T22:30:26+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3,7 +3,7 @@ CVE-2026-97720 (Incorrect implementation of JWT/OAuth
authentication in Impala e
CVE-2026-97294 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-97146 (Apache YuniKorn 1.9.0 and earlier allows bypassing the check
for the u ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-96408 (A code injection vulnerability exists in the upgrade script of
Movable ...)
TODO: check
CVE-2026-96335 (Missing Authorization vulnerability in WPMU DEV Forminator
allows Expl ...)
@@ -23,27 +23,27 @@ CVE-2026-94662 (Improper Neutralization of Input During Web
Page Generation ('Cr
CVE-2026-93684 (An SQL user using Impala up to and including version 4.5.2
with only S ...)
NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-93026 (This vulnerability in Veeam Backup & Replication allows a
Backup Viewe ...)
- TODO: check
+ NOT-FOR-US: Veeam
CVE-2026-92543 (Docker Engine classifies a registry hostname as insecure using
an any- ...)
TODO: check
CVE-2026-92542 (The firewall rules which mark VXLAN datagrams for encryption
indiscrim ...)
TODO: check
CVE-2026-92533 (Path traversal vulnerability in the BugTracker.NET file
download compo ...)
- TODO: check
+ NOT-FOR-US: BugTracker.NET
CVE-2026-92532 (Unrestricted file upload vulnerability in the BugTracker.NET
attachmen ...)
- TODO: check
+ NOT-FOR-US: BugTracker.NET
CVE-2026-92531 (Operating system command injection vulnerability in the SVN
integratio ...)
- TODO: check
+ NOT-FOR-US: BugTracker.NET
CVE-2026-92393 (Apache YuniKorn 1.9.0 and earlier does not implement label and
user an ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-90466 (Path traversal of 'trusted_jar_paths' in Impala 4.5.2 allows
an attack ...)
NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-89417 (The OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy.
plugin for ...)
NOT-FOR-US: WordPress plugin
CVE-2026-88514 (An issue in iTerm2 macOS before 3.6.12 allows a local attacker
to obta ...)
- TODO: check
+ NOT-FOR-US: iTerm2 macOS
CVE-2026-78243 (Apache YuniKorn 1.8.0 and later, if configured with the LDAP
group res ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-76501 (A vulnerability in the Segment Routing over IPv6 (SRv6)
Operation, Adm ...)
NOT-FOR-US: Cisco
CVE-2026-76500 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
@@ -103,21 +103,21 @@ CVE-2026-76452 (A vulnerability in the web-based
management interface of Cisco L
CVE-2026-76437 (A vulnerability in the web-based user interface of Cisco
License On-Pr ...)
TODO: check
CVE-2026-62253 (Homer is open source telecom observability software. Prior to
version ...)
- TODO: check
+ NOT-FOR-US: Homer
CVE-2026-62252 (Homer is open source telecom observability software. Prior to
version ...)
- TODO: check
+ NOT-FOR-US: Homer
CVE-2026-62251 (Homer is open source telecom observability software. Prior to
version ...)
- TODO: check
+ NOT-FOR-US: Homer
CVE-2026-62179 (PraisonAI is a multi-agent teams system. In
`praisonai-platform` prior ...)
NOT-FOR-US: PraisonAI
CVE-2026-62176 (PraisonAI is a multi-agent teams system. Prior to version
4.6.78, the ...)
NOT-FOR-US: PraisonAI
CVE-2026-5703 (Path traversal vulnerability in the Satel Iberia SenNet
Datalogger Ser ...)
- TODO: check
+ NOT-FOR-US: Satel Iberia SenNet Datalogger Serie 200
CVE-2026-58069 (This vulnerability in Veeam Backup & Replication allows an
authenticat ...)
- TODO: check
+ NOT-FOR-US: Veeam
CVE-2026-58068 (This vulnerability in Veeam Agent for Microsoft Windows allows
any loc ...)
- TODO: check
+ NOT-FOR-US: Veeam
CVE-2026-56851 (The Nickname profile can panic with an out-of-bounds slice
error when ...)
TODO: check
CVE-2026-46438 (wger is a free, open-source workout and fitness manager. Prior
to vers ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a4291beec83834e7d09314adc61e18bdd0e0f3fe
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a4291beec83834e7d09314adc61e18bdd0e0f3fe
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
