[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Process more NFUs

Salvatore Bonaccorso carnil at debian.org
Fri Jan 19 21:20:21 UTC 2018


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cd54a622 by Salvatore Bonaccorso at 2018-01-19T22:20:00+01:00
Process more NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -25,7 +25,7 @@ CVE-2018-5788
 CVE-2018-5787
 	RESERVED
 CVE-2017-18044 (A Command Injection issue was discovered in ...)
-	TODO: check
+	NOT-FOR-US: Commvault
 CVE-2018-5786 (In Long Range Zip (aka lrzip) 0.631, there is an infinite loop and ...)
 	- lrzip <unfixed>
 	NOTE: https://github.com/ckolivas/lrzip/issues/91
@@ -56,7 +56,7 @@ CVE-2018-5775
 CVE-2018-5774
 	RESERVED
 CVE-2018-5773 (An issue was discovered in markdown2 (aka python-markdown2) through ...)
-	TODO: check
+	NOT-FOR-US: python-markdown2 (not our markdown, different code base)
 CVE-2017-18043 [integer overflow in ROUND_UP macro could result in DoS]
 	RESERVED
 	- qemu 1:2.10.0+dfsg-2
@@ -18622,7 +18622,7 @@ CVE-2017-15871 (** DISPUTED ** The deserialize function in serialize-to-js throu
 CVE-2017-15870 (Palo Alto Networks GlobalProtect Agent before 4.0.3 allows attackers ...)
 	NOT-FOR-US: Palo Alto Networks GlobalProtect Agent
 CVE-2017-15869 (Cross-site scripting (XSS) vulnerability in knowledgebase.php in ...)
-	TODO: check
+	NOT-FOR-US: LiveZilla
 CVE-2017-15868 (The bnep_add_connection function in net/bluetooth/bnep/core.c in the ...)
 	{DSA-4082-1 DLA-1200-1}
 	- linux 4.0.2-1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/cd54a6226fb734e89c5c10e2db80d3985345d223

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/cd54a6226fb734e89c5c10e2db80d3985345d223
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180119/308b8bba/attachment.html>


More information about the Secure-testing-commits mailing list