Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
7b45c00a by Salvatore Bonaccorso at 2026-10-28T11:30:33+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -36,7 +36,7 @@ CVE-2026-63286 (Database backups are vulnerable to offline
attacks. Backups crea
CVE-2026-62765 (Access of resource using incompatible type ('type confusion')
in Micro ...)
NOT-FOR-US: Microsoft
CVE-2026-59158 (Nuxt Ollama integrates the official Ollama JavaScript library
into Nux ...)
- TODO: check
+ NOT-FOR-US: Nuxt Ollama (not same as ollama)
CVE-2026-58496 (Thor Vector Graphics (ThorVG) is a production-ready vector
graphics en ...)
- thorvg <unfixed>
NOTE:
https://github.com/thorvg/thorvg/security/advisories/GHSA-crfw-c34f-vqrj
@@ -82,7 +82,7 @@ CVE-2026-57186 (Asterisk is an open source private branch
exchange and telephony
NOTE:
https://github.com/asterisk/asterisk/security/advisories/GHSA-h5hv-jmgj-92q2
NOTE: Fixed by:
https://github.com/asterisk/asterisk/commit/0e776a837106d5d0d14503a53388337931045164
(22.10.1)
CVE-2026-50571 (WebSub is a W3C recommendation produced by the Social Web
Working Grou ...)
- TODO: check
+ NOT-FOR-US: WebSub specification
CVE-2026-39928
REJECTED
CVE-2026-2839 (The Advanced Custom Fields: Extended plugin for WordPress is
vulnerabl ...)
@@ -225,25 +225,25 @@ CVE-2026-118305 (Memory corruption in Turbolev in Google
Chrome prior to 156.0.8
CVE-2026-118304 (Improper input validation in SVG in Google Chrome prior to
156.0.8078. ...)
- chromium <unfixed>
CVE-2026-118276 (A vulnerability was determined in a2ui-project a2ui up to
0.10.6. This ...)
- TODO: check
+ NOT-FOR-US: a2ui-project a2ui
CVE-2026-118275 (A vulnerability was found in a2ui-project a2ui up to 0.10.6.
This affe ...)
- TODO: check
+ NOT-FOR-US: a2ui-project a2ui
CVE-2026-118274 (A vulnerability has been found in a2ui-project a2ui up to
0.10.6. Affe ...)
- TODO: check
+ NOT-FOR-US: a2ui-project a2ui
CVE-2026-118273 (A flaw has been found in a2ui-project a2ui up to 0.10.6.
Affected by t ...)
- TODO: check
+ NOT-FOR-US: a2ui-project a2ui
CVE-2026-118272 (A vulnerability was detected in a2ui-project a2ui up to
0.10.6. Affect ...)
- TODO: check
+ NOT-FOR-US: a2ui-project a2ui
CVE-2026-118271 (A security vulnerability has been detected in a2ui-project
a2ui up to ...)
- TODO: check
+ NOT-FOR-US: a2ui-project a2ui
CVE-2026-118169 (The Hustle \u2013 Email Marketing, Lead Generation, Optins,
Popups plu ...)
NOT-FOR-US: WordPress plugin
CVE-2026-118164 (The If-So Dynamic Content \u2013 Elementor & All Page
Builders Persona ...)
NOT-FOR-US: WordPress plugin
CVE-2026-118129 (A vulnerability was found in jeremyckahn Chitchatter up to
f8253863381 ...)
- TODO: check
+ NOT-FOR-US: jeremyckahn Chitchatter
CVE-2026-118128 (A vulnerability has been found in a2aproject a2a-js up to
1.1.0. Impac ...)
- TODO: check
+ NOT-FOR-US: a2aproject a2a-js
CVE-2026-117610 (libexpat through 2.9.0 contains a NULL pointer dereference
vulnerabili ...)
TODO: check
CVE-2026-117609 (rtl_433 through 25.12 contains a stack-based buffer overflow
vulnerabi ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7b45c00ae97c464045ecc13fa753829dcc8a9c68
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7b45c00ae97c464045ecc13fa753829dcc8a9c68
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
