Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6f3fcf17 by Salvatore Bonaccorso at 2026-09-21T18:14:17+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -5140,7 +5140,7 @@ CVE-2026-81866 (Apache NiFi 2.9.0 through 2.11.0 provide
Connector configuration
CVE-2026-81546 (The Affinity by Canva application before 3.3.0 (September 2026
release ...)
NOT-FOR-US: Canva application
CVE-2026-76646 (A remote attacker could cause excessive resource consumption
by supply ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-76460 (A vulnerability in an API of Cisco Identity Services Engine
(ISE) coul ...)
NOT-FOR-US: Cisco
CVE-2026-76451 (A vulnerability in Cisco Identity Services Engine (ISE) and
Cisco ISE ...)
@@ -7532,7 +7532,7 @@ CVE-2026-68950 (The affected products use hard-coded
credentials, which could al
CVE-2026-68904 (node-opcua is an OPC UA implementation for TypeScript and
Node.js. Fro ...)
NOT-FOR-US: node-opcua/node-opcua
CVE-2026-68536 (Server-Side Request Forgery / Local File Inclusion in Apache
MyFace Co ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-68531 (Concrete CMS 9 before 9.5.3 did not escape SQL LIKE wildcard
character ...)
NOT-FOR-US: Concrete CMS
CVE-2026-68530 (Concrete CMS 9 through 9.5.2 did not perform an authorization
check on ...)
@@ -11861,7 +11861,7 @@ CVE-2026-55073 (WeasyPrint helps web developers to
create PDF documents. Prior t
NOTE:
https://github.com/Kozea/WeasyPrint/security/advisories/GHSA-jf6q-chmf-3h3v
NOTE:
https://github.com/Kozea/WeasyPrint/commit/289e278439b017cd9263b4cd4727026987f86443
(v70.0)
CVE-2026-55072 (Pimcore is an Open Source Data & Experience Management
Platform. Prior ...)
- TODO: check
+ NOT-FOR-US: Pimcore
CVE-2026-54723 (devpi is a Python package index staging server and packaging,
testing, ...)
TODO: check
CVE-2026-54567 (Flask-Reuploaded provides file uploads for Flask. From 1.5.0
until 1.6 ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6f3fcf17c4cfe2da02c015c0f2b5ea6dae7fa2e4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6f3fcf17c4cfe2da02c015c0f2b5ea6dae7fa2e4
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
