Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a726bfea by Salvatore Bonaccorso at 2026-10-13T21:49:56+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -10,7 +10,7 @@ CVE-2026-97334 (The network messaging layer contained
improper handling of highl
CVE-2026-97333 (QAPI contained a stack-based buffer overflow affecting service
availab ...)
NOT-FOR-US: Commvault
CVE-2026-96535 (Cross-Site Scripting on the YouMind portal, specifically in
the avatar ...)
- TODO: check
+ NOT-FOR-US: YouMind portal
CVE-2026-96299 (A security issue was discovered in MongoDB mongos (the sharded
cluster ...)
TODO: check
CVE-2026-96297 (Use of freed memory in the aggregation feature of MongoDB
Server can c ...)
@@ -26,7 +26,7 @@ CVE-2026-95502 (A Git server that Grafana's Git Sync
(provisioning) is configure
CVE-2026-95127 (An issue in libass v.0.17.5 allows a remote attacker to cause
a denial ...)
TODO: check
CVE-2026-95124 (Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4
allows ...)
- TODO: check
+ NOT-FOR-US: libconfini
CVE-2026-95122 (mp4v2 2.0.0 contains a NULL pointer dereference vulnerability
in MP4Fi ...)
TODO: check
CVE-2026-95121 (An issue in mp4v2 2.0.0 allows an attacker to execute
arbitrary code v ...)
@@ -68,7 +68,7 @@ CVE-2026-91013 (Adobe Commerce is affected by a stored
Cross-Site Scripting (XSS
CVE-2026-89309 (Vulnerability in tbc. This issue affects tbc: before 1.)
TODO: check
CVE-2026-89279 (Cross-Site request forgery (CSRF) vulnerability in AuthTake
Technology ...)
- TODO: check
+ NOT-FOR-US: authtake
CVE-2026-89208 (A vulnerability has been identified in Capital Embedded AR
Classic 431 ...)
NOT-FOR-US: Siemens
CVE-2026-89206 (A vulnerability has been identified in RUGGEDCOM CROSSBOW (All
version ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a726bfeaf02d69d8aacf51efd333775e3663c99b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a726bfeaf02d69d8aacf51efd333775e3663c99b
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
