Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
89980d34 by Salvatore Bonaccorso at 2026-06-23T09:50:19+02:00
Process some more NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -107,19 +107,19 @@ CVE-2026-48509 (MessagePack for C# is a MessagePack
serializer for C#. Prior to
CVE-2026-48506 (MessagePack for C# is a MessagePack serializer for C#. Prior
to 2.5.30 ...)
TODO: check
CVE-2026-48505 (Filament is a collection of full-stack components for
accelerated Lara ...)
- TODO: check
+ NOT-FOR-US: Filament
CVE-2026-48502 (MessagePack for C# is a MessagePack serializer for C#. Prior
to 2.5.30 ...)
TODO: check
CVE-2026-48500 (Filament is a collection of full-stack components for
accelerated Lara ...)
- TODO: check
+ NOT-FOR-US: Filament
CVE-2026-48167 (Filament is a collection of full-stack components for
accelerated Lara ...)
- TODO: check
+ NOT-FOR-US: Filament
CVE-2026-48166 (Filament is a collection of full-stack components for
accelerated Lara ...)
- TODO: check
+ NOT-FOR-US: Filament
CVE-2026-48109 (MessagePack for C# is a MessagePack serializer for C#. Prior
to 2.5.30 ...)
TODO: check
CVE-2026-48067 (Filament is a collection of full-stack components for
accelerated Lara ...)
- TODO: check
+ NOT-FOR-US: Filament
CVE-2026-47242 (Net::IMAP implements Internet Message Access Protocol (IMAP)
client fu ...)
TODO: check
CVE-2026-47241 (Net::IMAP implements Internet Message Access Protocol (IMAP)
client fu ...)
@@ -163,11 +163,11 @@ CVE-2026-10651 (A malformed Bluetooth Classic SDP
attribute can trigger a reacha
CVE-2026-10645 (Zephyr's ext2 directory-entry parser does not fully validate
on-disk d ...)
NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2025-71358 (picklescan before 0.0.29 fails to detect malicious pickle
files that e ...)
- TODO: check
+ NOT-FOR-US: picklescan
CVE-2025-71344 (picklescan before 0.0.30 (affected versions 0.0.26 and
earlier) fails ...)
- TODO: check
+ NOT-FOR-US: picklescan
CVE-2025-71339 (Picklescan before 0.0.33 fails to detect the
numpy.f2py.crackfortran._ ...)
- TODO: check
+ NOT-FOR-US: picklescan
CVE-2026-9733
NOT-FOR-US: Mojolicious::Plugin::Web::Auth::OAuth2 Perl module
CVE-2026-9610 (IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator
9.1.7, 9 ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/89980d345f745ed5d162b8a862a68268103314ed
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/89980d345f745ed5d162b8a862a68268103314ed
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
