Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
270d4564 by Moritz Muehlenhoff at 2026-10-08T10:07:55+02:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -47,13 +47,13 @@ CVE-2026-94244 (The Wallet System for WooCommerce
WordPress plugin before 2.8.0
CVE-2026-94154 (The Aurora Heatmap plugin for WordPress is vulnerable to
Stored Cross- ...)
NOT-FOR-US: WordPress plugin
CVE-2026-92862 (The Android application "Ticket Ryutsu Center" improperly
handles cust ...)
- TODO: check
+ NOT-FOR-US: Android application Ticket Ryutsu Center
CVE-2026-92861 (The Android application "Ticket Ryutsu Center" contains
hard-coded cre ...)
- TODO: check
+ NOT-FOR-US: Android application Ticket Ryutsu Center
CVE-2026-89322 (Vault and Vault Enterprise did not consistently evaluate ACL
policies ...)
NOT-FOR-US: Hashicorp products not packaged in Debian
CVE-2026-87726 (Insufficient API bounds checking in phalFelica in NXP
NXPNfcRdLib RC66 ...)
- TODO: check
+ NOT-FOR-US: NXP
CVE-2026-87688 (An input validation vulnerability exists in the security
certificate m ...)
NOT-FOR-US: Brocade
CVE-2026-87687 (An authorization and input validation vulnerability exists in
Brocade ...)
@@ -211,19 +211,19 @@ CVE-2026-17538 (The LatePoint - Appointment Booking &
Reservation plugin for Wor
CVE-2026-17196 (The Super Forms \u2013 Drag & Drop Form Builder plugin for
WordPress i ...)
NOT-FOR-US: WordPress plugin
CVE-2026-107459 (The SecuShare Pro developed by Openfind has an OS Command
Injection vu ...)
- TODO: check
+ NOT-FOR-US: SecuShare Pro
CVE-2026-107450 (In Stump through 0.1.10, the updateSmartList and
deleteSmartList Graph ...)
- TODO: check
+ NOT-FOR-US: Stump
CVE-2026-107449 (linuxserver Heimdall through 2.8.3 applies its SafeUrlFetcher
SSRF pro ...)
- TODO: check
+ NOT-FOR-US: Heimdall
CVE-2026-107448 (Magic: The Gathering Arena (Windows/Steam client;
2026.59.30.12801.127 ...)
- TODO: check
+ NOT-FOR-US: Magic: The Gathering Arena
CVE-2026-107446 (containerd overlaybd through 1.0.18 has a do_load_index (LSMT
index lo ...)
TODO: check
CVE-2026-107445 (A flaw was found in Katello where the Flatpak Remote
Repositories API ...)
- TODO: check
+ NOT-FOR-US: Katello
CVE-2026-107444 (A flaw was found in Katello where the Docker Tags
repositories API doe ...)
- TODO: check
+ NOT-FOR-US: Katello
CVE-2026-107355
REJECTED
CVE-2026-107354
@@ -263,7 +263,7 @@ CVE-2026-107228 (The AsyncHttpClient (AHC) library allows
Java applications to e
CVE-2026-107227 (The AsyncHttpClient (AHC) library allows Java applications to
easily e ...)
TODO: check
CVE-2026-107176 (A flaw was found in the cluster-samples-operator. The RBAC
Role coreos ...)
- TODO: check
+ NOT-FOR-US: cluster-samples-operator
CVE-2026-107161 (A heap-based buffer overflow flaw was found in Cyrus SASL.
The add_to_ ...)
TODO: check
CVE-2026-105820 (Vault's ACL policy cache allowed namespace traversal when
policy names ...)
@@ -305,7 +305,7 @@ CVE-2023-5649 (An Improper Input Validation vulnerability
for the registered cas
CVE-2023-5648 (In Brocade ASCG before Brocade ASCG v3.0, several
security-related HTT ...)
NOT-FOR-US: Brocade
CVE-2017-20283 (NXP MQX Classic before 5.0 contains an out-of-bounds write
vulnerabili ...)
- TODO: check
+ NOT-FOR-US: NXP
CVE-2026-84790
- openvpn 2.7.8-1
NOTE: Fixed by:
https://github.com/OpenVPN/openvpn/commit/cf4384eef4676a01bd3ee98fa602f7b2af8079ea
(v2.7.8)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/270d456416edb9c672bb3fc6bcdc006131c22170
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/270d456416edb9c672bb3fc6bcdc006131c22170
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
