Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0a13a5f3 by Salvatore Bonaccorso at 2026-10-31T20:52:10+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,15 +1,15 @@
CVE-2026-96554 (The BuddyBoss Platform plugin for WordPress is vulnerable to
Stored Cr ...)
NOT-FOR-US: WordPress plugin
CVE-2026-78192 (WebDyne versions from 2.022 before 3.022 for Perl disclose
application ...)
- TODO: check
+ NOT-FOR-US: WebDyne
CVE-2026-78191 (WebDyne versions from 2.031 before 3.022 for Perl execute
files with . ...)
- TODO: check
+ NOT-FOR-US: WebDyne
CVE-2026-78190 (WebDyne versions from 2.014 before 3.022 for Perl reflect
request para ...)
- TODO: check
+ NOT-FOR-US: WebDyne
CVE-2026-78189 (WebDyne versions from 3.007 before 3.022 for Perl execute .psp
files o ...)
- TODO: check
+ NOT-FOR-US: WebDyne
CVE-2026-78188 (WebDyne versions from 2.014 before 3.022 for Perl issue
session cookie ...)
- TODO: check
+ NOT-FOR-US: WebDyne
CVE-2026-76010 (The Photo Gallery, Sliders, Proofing and Themes \u2013 NextGEN
Gallery ...)
NOT-FOR-US: WordPress plugin
CVE-2026-15272 (The Web 2.0 Directory plugin for WordPress is vulnerable to
time-based ...)
@@ -276,15 +276,15 @@ CVE-2026-61725 (sevenz-rust2 is a Rust-native 7z
compressor and `decompress`or.
NOTE:
https://github.com/hasenbanck/sevenz-rust2/security/advisories/GHSA-qh76-45cr-8xrc
NOTE: Fixed by:
https://github.com/hasenbanck/sevenz-rust2/commit/ef760b61f3535ac8b93006212aef41bfebc237eb
(v0.21.1)
CVE-2026-61694 (go-xrpl is a Go implementation of the XRP Ledger protocol. In
versions ...)
- TODO: check
+ NOT-FOR-US: go-xrpl
CVE-2026-61620 (HoneySQL turns Clojure data structures into SQL. From 2.0.0
until 2.7. ...)
- TODO: check
+ NOT-FOR-US: HoneySQL
CVE-2026-61618 (SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5,
KZG accu ...)
- TODO: check
+ NOT-FOR-US: SNARK Verifier
CVE-2026-59993 (Picotls is a TLS protocol library that allows users select
different c ...)
TODO: check
CVE-2026-58412 (Filecoin Pin is an IPFS Pinning Service API implementation
that pins t ...)
- TODO: check
+ NOT-FOR-US: Filecoin Pin
CVE-2026-55614 (uhttpd is a small HTTP server. In unpatched repository
snapshots, `cli ...)
NOT-FOR-US: uhttpd in OpenWrt
CVE-2026-55613 (uhttpd is a small HTTP server. In unpatched repository
snapshots, `uh_ ...)
@@ -641,19 +641,19 @@ CVE-2026-61728 (SOCFortress CoPilot focuses on providing
a single pane of glass
CVE-2026-61708 (SOCFortress CoPilot focuses on providing a single pane of
glass for al ...)
NOT-FOR-US: SOCFortress CoPilot
CVE-2026-61586 (Copernik XML Factory provides secure-by-default JAXP factory
creation ...)
- TODO: check
+ NOT-FOR-US: Copernik XML Factory
CVE-2026-59978 (AdminNeo is a full-featured database management tool written
in PHP. F ...)
NOT-FOR-US: AdminNeo
CVE-2026-59396 (A denial-of-service vulnerability exists in UAA's
private_key_jwt clie ...)
- TODO: check
+ NOT-FOR-US: Cloud Foundry UUA
CVE-2026-59388 (Cloud Controller (CAPI) leaks sensitive data into audit logs
in multip ...)
- TODO: check
+ NOT-FOR-US: Cloud Foundry
CVE-2026-59387 (The Nginx routing configuration for Cloud Controller blocks
unauthenti ...)
- TODO: check
+ NOT-FOR-US: Cloud Foundry
CVE-2026-59386 (A SpaceSupporter could improperly modify an application's
start comman ...)
- TODO: check
+ NOT-FOR-US: Cloud Foundry
CVE-2026-59385 (A user with SpaceDeveloper privileges could modify the URL of
a space- ...)
- TODO: check
+ NOT-FOR-US: Cloud Foundry
CVE-2026-55551 (ZAC is an open-source, workflow-based Common Ground component
for Dutc ...)
NOT-FOR-US: ZAC
CVE-2026-54855 (Unauthenticated Cross Site Scripting (XSS) in Profile Builder
<= 4.0.5 ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0a13a5f359c3681eae51c35014d4751dc074cd19
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0a13a5f359c3681eae51c35014d4751dc074cd19
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
