Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
694bce4e by Salvatore Bonaccorso at 2026-10-25T20:55:09+01:00
Process some new NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -60,11 +60,11 @@ CVE-2026-116187 (Rclone from v1.68.0 before v1.75.2
contains an authorization by
[bookworm] - rclone <not-affected> (Vulnerable code not present)
NOTE:
https://github.com/rclone/rclone/security/advisories/GHSA-35g6-9fjv-rmx5
CVE-2026-116186 (OpenRemote core (openremote-manager) before 1.31.0 does not
perform re ...)
- TODO: check
+ NOT-FOR-US: OpenRemote
CVE-2026-116185 (OpenRemote core before 1.31.0 contains an authorization
bypass vulnera ...)
- TODO: check
+ NOT-FOR-US: OpenRemote
CVE-2026-116184 (OpenRemote before 1.31.0 contains an authorization bypass
vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: OpenRemote
CVE-2026-116183 (phpMyFAQ before 4.1.10 contains an object-level authorization
bypass v ...)
NOT-FOR-US: phpMyFAQ
CVE-2026-116182 (phpMyFAQ before 4.1.10 contains a server-side request forgery
vulnerab ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/694bce4e84930dc78e43de5f0b6602c5c806ffc8
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/694bce4e84930dc78e43de5f0b6602c5c806ffc8
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits