[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3df8c4ef by Salvatore Bonaccorso at 2018-12-12T20:31:20Z
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -25,7 +25,7 @@ CVE-2018-20102 (An out-of-bounds read in dns_validate_dns_response in dns.c was
 	- haproxy <unfixed>
 	NOTE: http://git.haproxy.org/?p=haproxy.git;a=commit;h=efbbdf72992cd20458259962346044cafd9331c0
 CVE-2018-20101 (The codection "Import users from CSV with meta" plugin before 1.12.1 ...)
-	TODO: check
+	NOT-FOR-US: codection "Import users from CSV with meta" plugin for WordPress
 CVE-2018-20100
 	RESERVED
 CVE-2018-20099 (There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of ...)
@@ -37,7 +37,7 @@ CVE-2018-20097 (There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimar
 CVE-2018-20096 (There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf ...)
 	TODO: check
 CVE-2018-20095 (An issue was discovered in EnsureCapacity in Core/Ap4Array.h in Bento4 ...)
-	TODO: check
+	NOT-FOR-US: Bento4
 CVE-2018-20094 (An issue was discovered in XXL-CONF 1.6.0. There is a path traversal ...)
 	TODO: check
 CVE-2018-XXXX [response discrepancy information exposure]
@@ -102,7 +102,7 @@ CVE-2018-20066
 CVE-2018-20065
 	RESERVED
 CVE-2018-20064 (doorGets 7.0 allows remote attackers to write to arbitrary files via ...)
-	TODO: check
+	NOT-FOR-US: doorGets
 CVE-2018-20063
 	RESERVED
 CVE-2018-20062 (An issue was discovered in NoneCms V1.3. thinkphp/library/think/App.php ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/3df8c4ef3bc80bc22ff16431af3a24ee590f84b1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/3df8c4ef3bc80bc22ff16431af3a24ee590f84b1
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181212/6c86ef3f/attachment.html>