[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff jmm at debian.org
Sun May 13 21:18:03 BST 2018


Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
19162250 by Moritz Muehlenhoff at 2018-05-13T22:17:44+02:00
NFUs
puppet n/a

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -5,7 +5,7 @@ CVE-2018-11015
 CVE-2018-11014
 	RESERVED
 CVE-2018-11013 (Stack-based buffer overflow in the websRedirect function in GoAhead on ...)
-	TODO: check
+	NOT-FOR-US: D-Link
 CVE-2018-11012 (ruibaby Halo 0.0.2 has stored XSS via the loginName and loginPwd ...)
 	NOT-FOR-US: ruibaby Halo
 CVE-2018-11011 (ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to ...)
@@ -7069,9 +7069,9 @@ CVE-2018-8063
 CVE-2018-8062
 	RESERVED
 CVE-2018-8061 (HWiNFO AMD64 Kernel driver version 8.98 and lower allows an ...)
-	TODO: check
+	NOT-FOR-US: HWiNFO AMD64 Kernel driver
 CVE-2018-8060 (HWiNFO AMD64 Kernel driver version 8.98 and lower allows an ...)
-	TODO: check
+	NOT-FOR-US: HWiNFO AMD64 Kernel driver
 CVE-2018-8059 (The Djelibeybi configuration examples for use of NGINX in SUSE Portus ...)
 	NOT-FOR-US: Portus
 CVE-2018-8058 (CMS Made Simple (CMSMS) 2.2.6 has XSS in admin/moduleinterface.php via ...)
@@ -11801,9 +11801,9 @@ CVE-2018-6513
 CVE-2018-6512
 	RESERVED
 CVE-2018-6511 (A cross-site scripting vulnerability in Puppet Enterprise Console of ...)
-	TODO: check
+	- puppet <not-affected> (Specific to Puppet Enterprise)
 CVE-2018-6510 (A cross-site scripting vulnerability in Puppet Enterprise Console of ...)
-	TODO: check
+	- puppet <not-affected> (Specific to Puppet Enterprise)
 CVE-2018-6509
 	RESERVED
 CVE-2018-6508 (Puppet Enterprise 2017.3.x prior to 2017.3.3 are vulnerable to a ...)
@@ -19627,7 +19627,7 @@ CVE-2018-3651
 CVE-2018-3650
 	RESERVED
 CVE-2018-3649 (DLL injection vulnerability in the installation executables ...)
-	TODO: check
+	NOT-FOR-US: Intel
 CVE-2018-3648
 	RESERVED
 CVE-2018-3647
@@ -19691,7 +19691,7 @@ CVE-2018-3619
 CVE-2018-3618
 	RESERVED
 CVE-2018-3617 (Some implementations in Intel Integrated Performance Primitives ...)
-	TODO: check
+	NOT-FOR-US: Intel
 CVE-2018-3616
 	RESERVED
 CVE-2018-3615
@@ -26391,11 +26391,11 @@ CVE-2017-17448 (net/netfilter/nfnetlink_cthelper.c in the Linux kernel through 4
 	[wheezy] - linux <ignored> (User namespaces not supported)
 	NOTE: https://patchwork.kernel.org/patch/10089373/
 CVE-2018-1280 (Pivotal Greenplum Command Center versions 2.x prior to 2.5.1 contains ...)
-	TODO: check
+	NOT-FOR-US: Pivotal
 CVE-2018-1279
 	RESERVED
 CVE-2018-1278 (Apps Manager included in Pivotal Application Service, versions 1.12.x ...)
-	TODO: check
+	NOT-FOR-US: Pivotal
 CVE-2018-1277 (Cloud Foundry Garden-runC, versions prior to 1.13.0, does not ...)
 	NOT-FOR-US: Cloud Foundry
 CVE-2018-1276



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/19162250a185ae8139be64ff8d701adcaf6f8a49

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/19162250a185ae8139be64ff8d701adcaf6f8a49
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180513/e39a7abd/attachment.html>


More information about the debian-security-tracker-commits mailing list