Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e08d6075 by Salvatore Bonaccorso at 2026-10-15T13:26:14+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -141,9 +141,9 @@ CVE-2026-14572 (The Kirki \u2013 Freeform Page Builder,
Website Builder & Custom
CVE-2026-11905 (The Elementor Website Builder \u2013 more than just a page
builder plu ...)
NOT-FOR-US: WordPress plugin
CVE-2026-110934 (Improper validation of array index vulnerability in Samsung
Open Sourc ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2026-110933 (Uncaught exception vulnerability in Samsung Open Source Vyond
allows I ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2026-110926 (A flaw was found in OpenSSH. When compression is negotiated,
channels ...)
TODO: check
CVE-2026-110925 (A flaw was found in OpenSSH. A username entered on the ssh
command lin ...)
@@ -157,13 +157,13 @@ CVE-2026-110911 (Wheels 1.1.8 through 4.1.1 allows SQL
injection when caller-sup
CVE-2026-110909 (Wheels CLI through 4.1.0 does not verify that the local
development se ...)
TODO: check
CVE-2026-110908 (Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and
source revis ...)
- TODO: check
+ NOT-FOR-US: Netgate pfSense FRR package (pfSense-pkg-frr)
CVE-2026-110907 (Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before
1.34.6 mishan ...)
- TODO: check
+ NOT-FOR-US: Backdrop CMS
CVE-2026-110904 (ApostropheCMS before 4.33.0 allows authentication bypass for
REST API ...)
- TODO: check
+ NOT-FOR-US: ApostropheCMS
CVE-2026-110873 (Heym from 0.0.55 before 0.0.121 contains a privilege
escalation vulner ...)
- TODO: check
+ NOT-FOR-US: Heym
CVE-2026-110872 (Nodemailer from 3.0.0 before 10.0.10 contains a quadratic
complexity d ...)
- node-nodemailer 10.0.10+~8.0.1-1
NOTE:
https://github.com/nodemailer/nodemailer/security/advisories/GHSA-4g23-2xm8-66gc
@@ -718,15 +718,15 @@ CVE-2026-55167 (LDAP Account Manager (LAM) is a
webfrontend for managing entries
NOTE:
https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-xgjg-fchx-x3g3
NOTE: Fixed by:
https://github.com/LDAPAccountManager/lam/commit/a56dcaab3e0f572283f5861404ed58d5ea301bc6
(9.6)
CVE-2026-54554 (FOG is a free open-source cloning/imaging/rescue
suite/inventory manag ...)
- TODO: check
+ NOT-FOR-US: FOG
CVE-2026-54525 (Markdown Preview Enhanced is a Markdown preview extension for
Visual S ...)
- TODO: check
+ NOT-FOR-US: Markdown Preview Enhanced extension for Visual Studio Code
CVE-2026-53999 (Radius is a cloud-native, portable application platform that
makes app ...)
- TODO: check
+ NOT-FOR-US: Radius
CVE-2026-49206 (rapidcsv is a C++ CSV parser library. Prior to 8.99,
RemoveColumn, Ins ...)
- TODO: check
+ NOT-FOR-US: rapidcsv
CVE-2026-42093 (Redash is a package for data visualization and sharing. From
versions ...)
- TODO: check
+ NOT-FOR-US: Redash
CVE-2026-35161 (Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0,
contains an O ...)
NOT-FOR-US: Dell / EMC
CVE-2026-33798 (A Stack-based Buffer Overflow vulnerability in the srxpfe of
Juniper N ...)
@@ -744,16 +744,16 @@ CVE-2026-25946 (When OpenID sign-in is enabled, Gitea
accepts a user-supplied Op
CVE-2026-19673 (ethernet_recv() in subsys/net/l2/ethernet/ethernet.c validates
only th ...)
NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-16741 (Improper neutralization of special elements used in an OS
command ('OS ...)
- TODO: check
+ NOT-FOR-US: TR7 ASP
CVE-2026-16740 (Missing authentication for critical function vulnerability in
TR7 Cybe ...)
- TODO: check
+ NOT-FOR-US: TR7 ASP
CVE-2026-15176 (A vulnerability exists in NGINX Plus and NGINX Open Source
when a loca ...)
- nginx 1.30.4-8
NOTE: https://my.f5.com/manage/s/article/K000162416
CVE-2026-15102 (ADP Desktop SDK contains a vulnerability where sensitive
information i ...)
NOT-FOR-US: Autodesk
CVE-2026-14851 (A vulnerability relating to the exposure of confidential
information i ...)
- TODO: check
+ NOT-FOR-US: Coparts online billing service
CVE-2026-110777 (A flaw was found in evolution-data-server. Calendar events
containing ...)
TODO: check
CVE-2026-110775 (Nexent through 2.7.0 contains a missing authorization
vulnerability in ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e08d6075da71372362ab1a1e311abfb4e6047ea0
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e08d6075da71372362ab1a1e311abfb4e6047ea0
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
