Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b9a08d60 by Salvatore Bonaccorso at 2026-10-27T21:27:35+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -186,9 +186,9 @@ CVE-2026-57185 (Asterisk is an open source private branch
exchange and telephony
CVE-2026-56084 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
NOT-FOR-US: Dell / EMC
CVE-2026-54462 (Knative pkg provides common packages shared across Knative
repositorie ...)
- TODO: check
+ NOT-FOR-US: Knative pkg
CVE-2026-4337 (Unrestricted Upload of File with Dangerous Type vulnerability
in the P ...)
- TODO: check
+ NOT-FOR-US: PuMuKIT application
CVE-2026-48380 (Substance3D - Painter is affected by an out-of-bounds read
vulnerabili ...)
NOT-FOR-US: Adobe
CVE-2026-48379 (Substance3D - Painter is affected by a Stack-based Buffer
Overflow vul ...)
@@ -216,9 +216,9 @@ CVE-2026-16521 (An OS command injection vulnerability
exists because of insuffic
CVE-2026-16491 (Grafana\u2019s RBAC service ignored the requested folder when
checking ...)
NOT-FOR-US: Grafana
CVE-2026-16307 (Authorization bypass through User-Controlled key vulnerability
in Neti ...)
- TODO: check
+ NOT-FOR-US: EdoWEB
CVE-2026-15586 (Improper restriction of excessive authentication attempts
vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: Ontime
CVE-2026-13162 (An OS command vulnerability exists in CoreTec productthat
allows authe ...)
NOT-FOR-US: Hitachi Energy
CVE-2026-12887 (In affected versions of Octopus Server, a user with permission
to uplo ...)
@@ -238,15 +238,15 @@ CVE-2026-118175 (When replying to, forwarding, or editing
a crafted email messag
CVE-2026-118174 (When a message containing an OpenPGP key attachment was
displayed, Thu ...)
TODO: check
CVE-2026-118173 (MISP Guard, a proxy that enforces security policies on MISP
feed data, ...)
- TODO: check
+ NOT-FOR-US: MISP Guard
CVE-2026-118172 (The strapi/strapi (Core Admin / Webhook Runner) package is
vulnerable ...)
- TODO: check
+ NOT-FOR-US: strapi/strapi
CVE-2026-118171 (The strapi/content-manager package is missing content-scope
authorizat ...)
- TODO: check
+ NOT-FOR-US: strapi/content-manager
CVE-2026-118170 (The strapi/review-workflows package is vulnerable to a broken
access c ...)
- TODO: check
+ NOT-FOR-US: strapi/review-workflows
CVE-2026-118132 (NextChat version 2.16.1 contains a client\u2011side
cross\u2011site sc ...)
- TODO: check
+ NOT-FOR-US: NextChat
CVE-2026-118131 (GnuPG (version 2.5.21) for Windows contains a vulnerability
where defa ...)
TODO: check
CVE-2026-118027 (Frame poisoning in the Layout component. This vulnerability
was fixed ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b9a08d606f0686bf88de77daee0df03bdd5a9936
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b9a08d606f0686bf88de77daee0df03bdd5a9936
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
