Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b3bcd9de by Salvatore Bonaccorso at 2026-10-13T07:45:21+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,7 +1,7 @@
CVE-2026-9191 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
NOT-FOR-US: Progress Software
CVE-2026-96618 (Improper Handling of Highly Compressed Data (Data
Amplification) vulne ...)
- TODO: check
+ NOT-FOR-US: hexpm (server side)
CVE-2026-96612 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
TODO: check
CVE-2026-94451 (Quarkus REST Data Panache provides a way to automatically
generate RES ...)
@@ -15,9 +15,9 @@ CVE-2026-93693 (In Progress ShareFile Storage Zones
Controller v5.12.6 and below
CVE-2026-92877 (The JAXB factory methods historically relied solely on
`FEATURE_SECURE ...)
TODO: check
CVE-2026-92682 (In @neo4j/graphql versions from 7.0.0 up to but not including
7.6.4, t ...)
- TODO: check
+ NOT-FOR-US: neo4j/graphql
CVE-2026-92681 (In @neo4j/graphql versions up to and including 7.6.3,
@authentication ...)
- TODO: check
+ NOT-FOR-US: neo4j/graphql
CVE-2026-89140 (Temporal Server does not bind internal completion callbacks to
the nam ...)
NOT-FOR-US: Temporal Technologies
CVE-2026-87744 (A flaw was found in Quarkus REST Data Panache. This
vulnerability allo ...)
@@ -87,7 +87,7 @@ CVE-2026-85499 (Improper Authorization vulnerability in
Apache SkyWalking Banyan
CVE-2026-85471 (A flaw was found in Quay. An authenticated repository
administrator co ...)
NOT-FOR-US: Red Hat software not packaged in Debian
CVE-2026-84286 (ExLlamaV3\u2019s EXL3 loader uses an untrusted, model-supplied
index t ...)
- TODO: check
+ NOT-FOR-US: ExLlamaV3's EXL3 loader
CVE-2026-83536 (A flaw was found in openstack-network-exporter. The HTTP
server within ...)
TODO: check
CVE-2026-83535 (A flaw was found in openstack-network-exporter. When an
operator confi ...)
@@ -109,13 +109,13 @@ CVE-2026-6232 (An out-of-bounds write vulnerability in
the SPI host command inte
CVE-2026-68764
REJECTED
CVE-2026-65954 (PHPCSUtils is a suite of utility functions for use with
PHP_CodeSniffe ...)
- TODO: check
+ NOT-FOR-US: PHPCSUtils
CVE-2026-61994 (Missing Authorization vulnerability in RocketGeek WP-Members
wp-member ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-59977 (ConvertX is a self-hosted file conversion service. Prior to
0.18.0, th ...)
- TODO: check
+ NOT-FOR-US: ConvertX
CVE-2026-59976 (ConvertX is a self-hosted file conversion service. Prior to
0.18.0, th ...)
- TODO: check
+ NOT-FOR-US: ConvertX
CVE-2026-57143 (PraisonAI is a multi-agent teams system. Prior to
praisonaiagents 1.6. ...)
NOT-FOR-US: PraisonAI
CVE-2026-57118 (PraisonAI is a multi-agent teams system. Prior to
praisonaiagents 1.6. ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b3bcd9deeeda69cabc6830d6bba06f5bf81a071b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b3bcd9deeeda69cabc6830d6bba06f5bf81a071b
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
