[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2345c4fc by Moritz Muehlenhoff at 2018-07-15T23:56:52+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -42071,31 +42071,31 @@ CVE-2016-10518 (A vulnerability was found in the ping functionality of the ws mo
 	NOTE: https://nodesecurity.io/advisories/67
 	NOTE: Nodefs not covered by security support
 CVE-2015-9243 (When server level, connection level or route level CORS configurations ...)
-	TODO: check
+	NOT-FOR-US: hapi
 CVE-2015-9242 (Certain input strings when passed to new Date() or Date.parse() in ...)
-	TODO: check
+	NOT-FOR-US: ecstatic
 CVE-2015-9241 (Certain input passed into the If-Modified-Since or Last-Modified ...)
-	TODO: check
+	NOT-FOR-US: hapi
 CVE-2015-9240 (Due to a bug in the the default sign in functionality in the keystone ...)
-	TODO: check
+	NOT-FOR-US: keystone node module
 CVE-2015-9239 (ansi2html is vulnerable to regular expression denial of service ...)
-	TODO: check
+	NOT-FOR-US: ansi2html
 CVE-2015-9238 (secure-compare 3.0.0 and below do not actually compare two strings ...)
-	TODO: check
+	NOT-FOR-US: secure-compare node module
 CVE-2015-9237
 	RESERVED
 CVE-2015-9236 (Hapi versions less than 11.0.0 implement CORS incorrectly and allowed ...)
-	TODO: check
+	NOT-FOR-US: hapi
 CVE-2015-9235 (In jsonwebtoken node module before 4.2.2 it is possible for an ...)
 	NOT-FOR-US: jsonwebtoken node module
 CVE-2014-10068 (The inert directory handler in inert node module before 1.1.1 always ...)
-	TODO: check
+	NOT-FOR-US: inert
 CVE-2014-10067 (paypal-ipn before 3.0.0 uses the `test_ipn` parameter (which is set by ...)
-	TODO: check
+	NOT-FOR-US: paypal-ipn
 CVE-2014-10066 (Versions less than 0.1.4 of the static file server module fancy-server ...)
-	TODO: check
+	NOT-FOR-US: fancy-server
 CVE-2014-10065 (Certain input when passed into remarkable before 1.4.1 will bypass the ...)
-	TODO: check
+	NOT-FOR-US: remarkable
 CVE-2014-10064 (The qs module before 1.0.0 does not have an option or default for ...)
 	TODO: check
 CVE-2017-15994 (rsync 3.1.3-development before 2017-10-24 mishandles archaic ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/2345c4fcd59077f6c9799dbf42f3f0043da769e7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/2345c4fcd59077f6c9799dbf42f3f0043da769e7
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180715/e74c4adf/attachment-0001.html>