[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8f1dbd33 by Salvatore Bonaccorso at 2018-01-17T22:45:21+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1072,7 +1072,7 @@ CVE-2018-XXXX [Password protect the JSONRPC interface]
 CVE-2018-5300
 	RESERVED
 CVE-2018-5299 (A stack-based Buffer Overflow Vulnerability exists in the web server in ...)
-	TODO: check
+	NOT-FOR-US: Pulse Secure Pulse Connect Secure
 CVE-2018-5298 (In the Procter & Gamble "Oral-B App" (aka com.pg.oralb.oralbapp) ...)
 	NOT-FOR-US: Procter & Gamble "Oral-B App" for Android
 CVE-2018-5297
@@ -1159,7 +1159,7 @@ CVE-2018-5260
 CVE-2018-5259 (Discuz! DiscuzX X3.4 allows remote authenticated users to bypass ...)
 	NOT-FOR-US: Discuz! DiscuzX
 CVE-2018-5258 (The Neon app 1.6.14 iOS does not verify X.509 certificates from SSL ...)
-	TODO: check
+	NOT-FOR-US: Neon app
 CVE-2018-5257
 	RESERVED
 CVE-2018-5256
@@ -1312,7 +1312,7 @@ CVE-2018-5197
 CVE-2018-5196
 	RESERVED
 CVE-2018-5195 (Hancom NEO versions 9.6.1.5183 and earlier have a buffer Overflow ...)
-	TODO: check
+	NOT-FOR-US: Hancom NEO
 CVE-2018-5194
 	RESERVED
 CVE-2018-5193
@@ -4902,7 +4902,7 @@ CVE-2017-17949 (Cells Blog 3.5 has XSS via the pub_readpost.php fmid parameter. 
 CVE-2017-17948 (Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic ...)
 	NOT-FOR-US: Cells Blog
 CVE-2017-17947 (A cross site scripting issue has been found in custompage.cgi in Pulse ...)
-	TODO: check
+	NOT-FOR-US: Pulse Secure Pulse Connect Secure
 CVE-2017-1000411
 	RESERVED
 	NOT-FOR-US: OpenDayLight



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8f1dbd33e23e501467e7fe4ff747ee32df064b8e

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8f1dbd33e23e501467e7fe4ff747ee32df064b8e
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180117/17c62fbb/attachment.html>