Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
515acce7 by Salvatore Bonaccorso at 2026-10-13T09:48:06+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,7 +1,7 @@
CVE-2026-9268 (GitLab has remediated an issue in GitLab EE affecting all
versions fro ...)
NOT-FOR-US: GitLab (used to be packaged in the Debian archive as
src:gitlab, but never in a stable release)
CVE-2026-97691 (Convex is an open-source reactive database for application
developers. ...)
- TODO: check
+ NOT-FOR-US: Convex
CVE-2026-97229 (GitLab has remediated an issue in GitLab CE/EE affecting all
versions ...)
NOT-FOR-US: GitLab (used to be packaged in the Debian archive as
src:gitlab, but never in a stable release)
CVE-2026-96893 (GitLab has remediated an issue in GitLab EE affecting all
versions fro ...)
@@ -94,7 +94,7 @@ CVE-2026-89106 (SAP UI5 does not perform sufficient input
validation under certa
CVE-2026-89105 (The HybridTokenAuthenticator component of the
SAP/cloud-security-servi ...)
NOT-FOR-US: SAP
CVE-2026-87689 (The Metasploit Framework Web Service REST API (msf-ws) exposes
the cre ...)
- TODO: check
+ NOT-FOR-US: Metasploit Framework Web Service REST API (msf-ws)
CVE-2026-85529 (GitLab has remediated an issue in GitLab CE/EE affecting all
versions ...)
NOT-FOR-US: GitLab (used to be packaged in the Debian archive as
src:gitlab, but never in a stable release)
CVE-2026-85457 (IBM Planning Analytics 2.0, and 2.1 could allow a remote
authenticated ...)
@@ -102,27 +102,27 @@ CVE-2026-85457 (IBM Planning Analytics 2.0, and 2.1 could
allow a remote authent
CVE-2026-84418 (IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a
man-in-the-mid ...)
NOT-FOR-US: IBM
CVE-2026-84360 (Nginx UI is a web user interface for the Nginx web server.
Prior to 2. ...)
- TODO: check
+ NOT-FOR-US: Nginx UI
CVE-2026-84321 (Nginx UI is a web user interface for the Nginx web server.
Prior to 2. ...)
- TODO: check
+ NOT-FOR-US: Nginx UI
CVE-2026-84320 (Nginx UI is a web user interface for the Nginx web server.
Prior to 2. ...)
- TODO: check
+ NOT-FOR-US: Nginx UI
CVE-2026-84319 (Nginx UI is a web user interface for the Nginx web server.
Prior to 2. ...)
- TODO: check
+ NOT-FOR-US: Nginx UI
CVE-2026-84318 (Nginx UI is a web user interface for the Nginx web server.
From 2.0.0- ...)
- TODO: check
+ NOT-FOR-US: Nginx UI
CVE-2026-84317 (Nginx UI is a web user interface for the Nginx web server.
Prior to 2. ...)
- TODO: check
+ NOT-FOR-US: Nginx UI
CVE-2026-84316 (Nginx UI is a web user interface for the Nginx web server.
Prior to 2. ...)
- TODO: check
+ NOT-FOR-US: Nginx UI
CVE-2026-84315 (Nginx UI is a web user interface for the Nginx web server.
Prior to 2. ...)
- TODO: check
+ NOT-FOR-US: Nginx UI
CVE-2026-84314 (Nginx UI is a web user interface for the Nginx web server.
Prior to 2. ...)
- TODO: check
+ NOT-FOR-US: Nginx UI
CVE-2026-84313 (Nginx UI is a web user interface for the Nginx web server.
Prior to 2. ...)
- TODO: check
+ NOT-FOR-US: Nginx UI
CVE-2026-84312 (Nginx UI is a web user interface for the Nginx web server.
Prior to 2. ...)
- TODO: check
+ NOT-FOR-US: Nginx UI
CVE-2026-84284 (GitLab has remediated an issue in GitLab CE/EE affecting all
versions ...)
NOT-FOR-US: GitLab (used to be packaged in the Debian archive as
src:gitlab, but never in a stable release)
CVE-2026-82632 (GitLab has remediated an issue in GitLab CE/EE affecting all
versions ...)
@@ -188,17 +188,17 @@ CVE-2026-54868 (Improper Neutralization of Input During
Web Page Generation ('Cr
CVE-2026-54867 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-54459 (FileRise is a self-hosted web-based file manager with
multi-file uploa ...)
- TODO: check
+ NOT-FOR-US: FileRise
CVE-2026-53997 (Netherman Portal del Hermano (portaldelhermano.es) before
2026-10-06 c ...)
- TODO: check
+ NOT-FOR-US: Netherman Portal del Hermano (portaldelhermano.es)
CVE-2026-53922 (odhcpd is the DHCPv6, DHCPv4, and router-advertisement server
used by ...)
- TODO: check
+ NOT-FOR-US: odhcpd
CVE-2026-49484 (Code for IBM i is a Visual Studio Code extension for
maintaining and c ...)
- TODO: check
+ NOT-FOR-US: Code for IBM i
CVE-2026-49483 (Code for IBMi is a Visual Studio Code extension for
maintaining and co ...)
- TODO: check
+ NOT-FOR-US: Code for IBM i
CVE-2026-44828 (Qexo is an open source online editor for static blogs. From
4.0.0 unti ...)
- TODO: check
+ NOT-FOR-US: Qexo
CVE-2026-41510 (OWASP Coraza WAF is a golang modsecurity compatible web
application fi ...)
TODO: check
CVE-2026-41508 (OWASP Coraza WAF is a golang modsecurity compatible web
application fi ...)
@@ -753,9 +753,9 @@ CVE-2026-85471 (A flaw was found in Quay. An authenticated
repository administra
CVE-2026-84286 (ExLlamaV3\u2019s EXL3 loader uses an untrusted, model-supplied
index t ...)
NOT-FOR-US: ExLlamaV3's EXL3 loader
CVE-2026-83536 (A flaw was found in openstack-network-exporter. The HTTP
server within ...)
- TODO: check
+ NOT-FOR-US: Red Hat openstack-network-exporter
CVE-2026-83535 (A flaw was found in openstack-network-exporter. When an
operator confi ...)
- TODO: check
+ NOT-FOR-US: Red Hat openstack-network-exporter
CVE-2026-81856 (Improper Neutralization of Escape, Meta, or Control Sequences
vulnerab ...)
- erlang-hex <unfixed>
NOTE:
https://github.com/hexpm/hex/security/advisories/GHSA-fpmj-3cxg-p766
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/515acce77b991a543acf569458955c65c08db998
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/515acce77b991a543acf569458955c65c08db998
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
