Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
146fc601 by Salvatore Bonaccorso at 2026-10-20T14:14:13+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -167,13 +167,13 @@ CVE-2026-17518 (Buffer Copy without Checking Size of
Input in certain ASUS route
CVE-2026-12489 (An incorrect authorization vulnerability in the Data Access
Layer (DAL ...)
NOT-FOR-US: Zyxel
CVE-2026-113404 (WebITR developed by Uniong has a Insecure Deserialization
vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: WebITR from Uniong
CVE-2026-113402 (ArmorX Spam developed by ArmorX Global Technology has a Local
File Inc ...)
- TODO: check
+ NOT-FOR-US: ArmorX
CVE-2026-113380 (In the RingRTC library before 2.72.0 for Signal, a peer that
saturates ...)
- TODO: check
+ NOT-FOR-US: RingRTC library for Signal
CVE-2026-112991 (The html_to_markdown expansion module in MISP Modules
contains a serve ...)
- TODO: check
+ NOT-FOR-US: html_to_markdown expansion module in MISP Modules
CVE-2026-112901 (Pillow is a Python imaging library. Prior to 13.0.0, Pillow's
XBM head ...)
- pillow <unfixed>
NOTE:
https://github.com/python-pillow/Pillow/security/advisories/GHSA-xgh8-jp6q-p5x8
@@ -216,13 +216,13 @@ CVE-2026-112891 (Pillow is a Python imaging library. From
9.2.0 until 13.0.0, Pi
NOTE:
https://github.com/python-pillow/Pillow/security/advisories/GHSA-fc9g-5qg7-mf45
NOTE: Fixed by:
https://github.com/python-pillow/Pillow/commit/68a3fe957d8a4d552e8c69d96066d749f0614c7e
(13.0.0)
CVE-2026-112782 (Grav 1.7.53 before 1.7.53.5 and 2.0.0-rc.8 before 2.2.2
contains a res ...)
- TODO: check
+ NOT-FOR-US: Grav CMS
CVE-2026-112781 (Grav from 2.0.0 before 2.2.2 contains an information
disclosure vulner ...)
- TODO: check
+ NOT-FOR-US: Grav CMS
CVE-2026-112780 (Grav from 2.0.15 before 2.2.2 contains an allowlist bypass
vulnerabili ...)
- TODO: check
+ NOT-FOR-US: Grav CMS
CVE-2026-112779 (Grav API plugin (grav-plugin-api) 1.0.40 before 1.0.42 caches
a full t ...)
- TODO: check
+ NOT-FOR-US: Grav plugin
CVE-2026-112778 (Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack
namespace va ...)
TODO: check
CVE-2026-112777 (Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a
blocklist ...)
@@ -315,29 +315,29 @@ CVE-2026-112390 (Pillow is a Python imaging library. From
7.2.0 until 13.0.0, Pi
NOTE:
https://github.com/python-pillow/Pillow/security/advisories/GHSA-22hg-r758-rrw9
NOTE: Fixed by:
https://github.com/python-pillow/Pillow/commit/26cb3ed061173b817b9ee4b6f507cb0e1e293218
(13.0.0)
CVE-2026-112373 (A security vulnerability has been detected in H3C Magic NX15
NX15V100R ...)
- TODO: check
+ NOT-FOR-US: H3C
CVE-2026-112372 (A weakness has been identified in H3C Magic NX15 V100R017.
This affect ...)
- TODO: check
+ NOT-FOR-US: H3C
CVE-2026-112371 (A vulnerability was determined in H3C Magic NX15
NX15V100R017. Impacte ...)
- TODO: check
+ NOT-FOR-US: H3C
CVE-2026-112370 (A vulnerability was found in H3C Magic NX15 100R017. This
issue affect ...)
- TODO: check
+ NOT-FOR-US: H3C
CVE-2026-112361 (A vulnerability has been found in Dolibarr up to 23.0.2. The
impacted ...)
NOT-FOR-US: Dolibarr
CVE-2026-112360 (A security vulnerability has been detected in Netis EAP930
1.250905.11 ...)
- TODO: check
+ NOT-FOR-US: Netis
CVE-2026-112358 (A weakness has been identified in TiBillet Lespass up to
10e87909c5d52 ...)
- TODO: check
+ NOT-FOR-US: TiBillet Lespass
CVE-2026-112302 (A weakness has been identified in kiwilan php-archive up to
2.3.02. Th ...)
- TODO: check
+ NOT-FOR-US: kiwilan php-archive
CVE-2026-112301 (A security flaw has been discovered in orbitale
imagemagick-php up to ...)
- TODO: check
+ NOT-FOR-US: orbitale imagemagick-php
CVE-2026-112300 (A vulnerability was identified in DiffSK configobj up to
5.0.9. Affect ...)
TODO: check
CVE-2026-112299 (A vulnerability was determined in smrealms smr up to
f40380c017bc35cd8 ...)
- TODO: check
+ NOT-FOR-US: smrealms smr
CVE-2026-112297 (A flaw has been found in ptbsare anx-calibre-manager up to
1.13.12. Th ...)
- TODO: check
+ NOT-FOR-US: ptbsare anx-calibre-manager
CVE-2026-112261 (A flaw was found in GIMP. Opening a crafted XCF that selects
a path an ...)
TODO: check
CVE-2026-112260 (A flaw was found in GIMP. Opening a crafted XCF with a
malformed text- ...)
@@ -105952,9 +105952,9 @@ CVE-2026-43832 (Full details and mitigation steps are
currently restricted and w
CVE-2026-43831 (Full details and mitigation steps are currently restricted and
will be ...)
TODO: check
CVE-2026-43830 (Full details and mitigation steps are currently restricted and
will be ...)
- TODO: check
+ NOT-FOR-US: Advantech
CVE-2026-43829 (Full details and mitigation steps are currently restricted and
will be ...)
- TODO: check
+ NOT-FOR-US: Advantech
CVE-2026-38709 (TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23,
WR1300 ...)
NOT-FOR-US: Cudy
CVE-2026-35847 (An issue in dnsmgr v.2.15 and before allows a local attacker
to execut ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/146fc601f133b97378d17c4792e69541f8c937eb
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/146fc601f133b97378d17c4792e69541f8c937eb
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
