Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
3a2e9bd9 by Salvatore Bonaccorso at 2026-10-15T10:21:29+02:00
Process some more NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -61,29 +61,29 @@ CVE-2026-69193 (FileRise is a self-hosted web-based file
manager with multi-file
CVE-2026-69191 (FileRise is a self-hosted web-based file manager with
multi-file uploa ...)
NOT-FOR-US: FileRise
CVE-2026-64856 (FileRise is a self-hosted web-based file manager with
multi-file uploa ...)
- TODO: check
+ NOT-FOR-US: FileRise
CVE-2026-62664 (FileRise is a self-hosted web-based file manager with
multi-file uploa ...)
- TODO: check
+ NOT-FOR-US: FileRise
CVE-2026-61844 (FileRise is a self-hosted web-based file manager with
multi-file uploa ...)
- TODO: check
+ NOT-FOR-US: FileRise
CVE-2026-61843 (FileRise is a self-hosted web-based file manager with
multi-file uploa ...)
- TODO: check
+ NOT-FOR-US: FileRise
CVE-2026-58100 (kqueue_fork_copy_knote() indexed into the child's file
descriptor tabl ...)
- TODO: check
+ NOT-FOR-US: FreeBSD
CVE-2026-58099 (When copying knotes from a parent kqueue to a child, the copy
code did ...)
- TODO: check
+ NOT-FOR-US: FreeBSD
CVE-2026-58098 (When semop(2) blocks waiting for a semaphore condition, it
releases th ...)
- TODO: check
+ NOT-FOR-US: FreeBSD
CVE-2026-57493 (FileRise is a self-hosted web-based file manager with
multi-file uploa ...)
- TODO: check
+ NOT-FOR-US: FileRise
CVE-2026-57492 (FileRise is a self-hosted web-based file manager with
multi-file uploa ...)
- TODO: check
+ NOT-FOR-US: FileRise
CVE-2026-57491 (FileRise is a self-hosted web-based file manager with
multi-file uploa ...)
- TODO: check
+ NOT-FOR-US: FileRise
CVE-2026-57490 (FileRise is a self-hosted web-based file manager with
multi-file uploa ...)
- TODO: check
+ NOT-FOR-US: FileRise
CVE-2026-57489 (FileRise is a self-hosted web-based file manager with
multi-file uploa ...)
- TODO: check
+ NOT-FOR-US: FileRise
CVE-2026-55684 (WeGIA is a web manager for charitable institutions. Prior to
3.8.6, th ...)
NOT-FOR-US: WeGIA
CVE-2026-55683 (WeGIA is a web manager for charitable institutions. Prior to
3.8.6, th ...)
@@ -97,21 +97,21 @@ CVE-2026-55680 (WeGIA is a web manager for charitable
institutions. Prior to 3.8
CVE-2026-55679 (WeGIA is a web manager for charitable institutions. Prior to
3.8.6, th ...)
NOT-FOR-US: WeGIA
CVE-2026-55498 (FileRise is a self-hosted web-based file manager with
multi-file uploa ...)
- TODO: check
+ NOT-FOR-US: FileRise
CVE-2026-55387 (InvoiceShelf is an open-source web & mobile app that helps
track expen ...)
- TODO: check
+ NOT-FOR-US: InvoiceShelf
CVE-2026-55386 (InvoiceShelf is an open-source web & mobile app that helps
track expen ...)
- TODO: check
+ NOT-FOR-US: InvoiceShelf
CVE-2026-55385 (InvoiceShelf is an open-source web & mobile app that helps
track expen ...)
- TODO: check
+ NOT-FOR-US: InvoiceShelf
CVE-2026-55384 (InvoiceShelf is an open-source web & mobile app that helps
track expen ...)
- TODO: check
+ NOT-FOR-US: InvoiceShelf
CVE-2026-55383 (InvoiceShelf is an open-source web & mobile app that helps
track expen ...)
- TODO: check
+ NOT-FOR-US: InvoiceShelf
CVE-2026-55382 (InvoiceShelf is an open-source web & mobile app that helps
track expen ...)
- TODO: check
+ NOT-FOR-US: InvoiceShelf
CVE-2026-55381 (InvoiceShelf is an open-source web & mobile app that helps
track expen ...)
- TODO: check
+ NOT-FOR-US: InvoiceShelf
CVE-2026-54703 (Markdown Preview Enhanced is a Markdown preview extension for
Visual S ...)
TODO: check
CVE-2026-54702 (Markdown Preview Enhanced is a Markdown preview extension for
Visual S ...)
@@ -687,7 +687,7 @@ CVE-2026-63021 (Gitea's Swift package parser limits each
manifest to 128 KiB but
CVE-2026-62925 (Gitea parses Alpine package uploads before enforcing
package-size quot ...)
NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-62858 (YOURLS is a self-hosted, customizable URL shortener written in
PHP. Pr ...)
- TODO: check
+ NOT-FOR-US: YOURLS
CVE-2026-60021 (Gitea's initial GitLab migration version probe uses an HTTP
client wit ...)
NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-60018 (Gitea's OneDev migration downloader reads the entire remote
version re ...)
@@ -697,19 +697,19 @@ CVE-2026-60010 (Gitea's repository-side team-link API
allows a repository admini
CVE-2026-60008 (Gitea's Jupyter notebook renderer inserts the notebook's
language_info ...)
NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-59951 (The MCP Python SDK, called mcp on PyPI, is a Python
implementation of ...)
- TODO: check
+ NOT-FOR-US: MCP Python SDK
CVE-2026-59774 (Gitea's Org-mode markup renderer processes INCLUDE directives
supplied ...)
NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-59766 (Gitea's starred-repository and tracked-time API endpoints do
not re-ch ...)
NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-55787 (Flyto2 Core is an execution kernel for automation and AI-agent
workflo ...)
- TODO: check
+ NOT-FOR-US: Flyto2 Core
CVE-2026-55786 (Flyto2 Core is an execution kernel for automation and AI-agent
workflo ...)
- TODO: check
+ NOT-FOR-US: Flyto2 Core
CVE-2026-55573 (e107 is a content management system (CMS). Prior to 2.3.7,
install.php ...)
- TODO: check
+ NOT-FOR-US: e107 CMS
CVE-2026-55572 (e107 is a content management system (CMS). Prior to 2.3.7, the
bundled ...)
- TODO: check
+ NOT-FOR-US: e107 CMS
CVE-2026-55167 (LDAP Account Manager (LAM) is a webfrontend for managing
entries (e.g. ...)
TODO: check
CVE-2026-54554 (FOG is a free open-source cloning/imaging/rescue
suite/inventory manag ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3a2e9bd93b56364ceb9cc319b83d34ffc440f707
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3a2e9bd93b56364ceb9cc319b83d34ffc440f707
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
