[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso carnil at debian.org
Thu Oct 11 22:19:22 BST 2018


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
377fbe0a by Salvatore Bonaccorso at 2018-10-11T21:18:54Z
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -6064,7 +6064,7 @@ CVE-2018-15768
 CVE-2018-15767
 	RESERVED
 CVE-2018-15766 (On install, Dell Encryption versions prior 10.0.1 and Dell Endpoint ...)
-	TODO: check
+	NOT-FOR-US: Dell
 CVE-2018-15765
 	RESERVED
 CVE-2018-15764 (Dell EMC ESRS Policy Manager versions 6.8 and prior contain a remote ...)
@@ -13845,7 +13845,7 @@ CVE-2018-12598
 CVE-2018-12597
 	RESERVED
 CVE-2018-12596 (Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU ...)
-	TODO: check
+	NOT-FOR-US: Episerver Ektron CMS
 CVE-2018-12595
 	RESERVED
 CVE-2018-12594 (Reliable Controls MACH-ProWebCom 7.80 devices allow remote attackers to ...)
@@ -14154,7 +14154,7 @@ CVE-2018-12476
 CVE-2018-12475
 	RESERVED
 CVE-2018-12474 (Improper input validation in obs-service-tar_scm of Open Build Service ...)
-	TODO: check
+	NOT-FOR-US: obs-service-tar_scm of Open Build Service
 CVE-2018-12473 (A path traversal traversal vulnerability in obs-service-tar_scm of ...)
 	NOT-FOR-US: obs-service-tar_scm of Open Build Service
 CVE-2018-12472 (A improper authentication using the HOST header in SUSE Linux SMT ...)
@@ -14207,9 +14207,9 @@ CVE-2018-12458 (An improper integer type in the mpeg4_encode_gop_header function
 CVE-2018-12457 (expressCart before 1.1.6 allows remote attackers to create an admin ...)
 	NOT-FOR-US: expressCart
 CVE-2018-12456 (Intelbras NPLUG 1.0.0.14 wireless repeater devices have no CSRF token ...)
-	TODO: check
+	NOT-FOR-US: Intelbras NPLUG 1.0.0.14 wireless repeater devices
 CVE-2018-12455 (Intelbras NPLUG 1.0.0.14 wireless repeater devices have a critical ...)
-	TODO: check
+	NOT-FOR-US: Intelbras NPLUG 1.0.0.14 wireless repeater devices
 CVE-2018-12454 (The _addguess function of a simplelottery smart contract implementation ...)
 	NOT-FOR-US: simplelottery
 CVE-2018-12453 (Type confusion in the xgroupCommand function in t_stream.c in ...)
@@ -14223,7 +14223,7 @@ CVE-2018-12451
 CVE-2018-12450
 	RESERVED
 CVE-2018-12449 (The Whale browser installer 0.4.3.0 and earlier versions allows DLL ...)
-	TODO: check
+	NOT-FOR-US: Whale browser installer
 CVE-2018-12448 (Whale Browser before 1.3.48.4 displays no URL information but only a ...)
 	NOT-FOR-US: Whale Browser
 CVE-2018-12447 (The restore_tqb_pixels function in hevc_filter.c in libavcodec, as used ...)
@@ -15149,7 +15149,7 @@ CVE-2018-12163 (A DLL injection vulnerability in the Intel IoT Developers Kit 4.
 CVE-2018-12162 (Directory permissions in the Intel OpenVINO Toolkit for Windows before ...)
 	NOT-FOR-US: Intel OpenVINO Toolkit for Windows
 CVE-2018-12161 (Insufficient session validation in the webserver component of the ...)
-	TODO: check
+	NOT-FOR-US: Intel Rapid Web Server
 CVE-2018-12160 (DLL injection vulnerability in software installer for Intel Data ...)
 	NOT-FOR-US: Intel
 CVE-2018-12159



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/377fbe0a19f8ff79fd51fb93a9ac881cc9ec465d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/377fbe0a19f8ff79fd51fb93a9ac881cc9ec465d
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181011/f06e54c4/attachment.html>


More information about the debian-security-tracker-commits mailing list