[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso carnil at debian.org
Sat Oct 27 09:46:55 BST 2018


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
22dcf442 by Salvatore Bonaccorso at 2018-10-27T08:41:43Z
Process NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -7,7 +7,7 @@ CVE-2018-18696
 CVE-2018-18695
 	RESERVED
 CVE-2018-18694 (admin/index.php?id=filesmanager in Monstra CMS 3.0.4 allows remote ...)
-	TODO: check
+	NOT-FOR-US: Monstra CMS
 CVE-2018-18693
 	RESERVED
 CVE-2018-18692
@@ -78,15 +78,15 @@ CVE-2018-18662 (There is an out-of-bounds read in fz_run_t3_glyph in fitz/font.c
 CVE-2018-18661 (An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer ...)
 	TODO: check
 CVE-2018-18660 (An issue was discovered in Arcserve Unified Data Protection (UDP) ...)
-	TODO: check
+	NOT-FOR-US: Arcserve Unified Data Protection
 CVE-2018-18659 (An issue was discovered in Arcserve Unified Data Protection (UDP) ...)
-	TODO: check
+	NOT-FOR-US: Arcserve Unified Data Protection
 CVE-2018-18658 (An issue was discovered in Arcserve Unified Data Protection (UDP) ...)
-	TODO: check
+	NOT-FOR-US: Arcserve Unified Data Protection
 CVE-2018-18657 (An issue was discovered in Arcserve Unified Data Protection (UDP) ...)
-	TODO: check
+	NOT-FOR-US: Arcserve Unified Data Protection
 CVE-2018-18656 (The PureVPN client before 6.1.0 for Windows stores Login Credentials ...)
-	TODO: check
+	NOT-FOR-US: PureVPN client for Windows
 CVE-2018-18653 (The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI ...)
 	- linux <undetermined>
 	TODO: check, this should be very Ubuntu specific, but it is introduced with the out-of-tree patch from the Lockdown patchset  https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/cosmic/commit/?id=03c7de9e956395f3b36f86f89b62780ad9501eef and so possibly affect our kernel as well in some way.



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/22dcf442f0b26fdeeff5067c694fa444cd14b58c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/22dcf442f0b26fdeeff5067c694fa444cd14b58c
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181027/41673ccd/attachment.html>


More information about the debian-security-tracker-commits mailing list