[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso carnil at debian.org
Wed Sep 26 21:25:27 BST 2018 

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7b1ab2c0 by Salvatore Bonaccorso at 2018-09-26T20:24:08Z
Process NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -29,7 +29,7 @@ CVE-2018-17540
 CVE-2018-17539
 	RESERVED
 CVE-2018-17538 (Axon (formerly TASER International) Evidence Sync 3.15.89 is vulnerable ...)
-	TODO: check
+	NOT-FOR-US: Axon Evidence Sync
 CVE-2018-17537
 	RESERVED
 CVE-2018-17536
@@ -1960,7 +1960,7 @@ CVE-2018-16674
 CVE-2018-16673
 	RESERVED
 CVE-2018-16672 (An issue was discovered in CIRCONTROL CirCarLife before 4.3. Due to ...)
-	TODO: check
+	NOT-FOR-US: CIRCONTROL CirCarLife
 CVE-2018-16671 (An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is ...)
 	NOT-FOR-US: CIRCONTROL CirCarLife
 CVE-2018-16670 (An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is ...)
@@ -4605,7 +4605,7 @@ CVE-2018-15607 (In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x
 	[jessie] - imagemagick <ignored> (Minor issue)
 	NOTE: https://github.com/ImageMagick/ImageMagick/issues/1255
 CVE-2018-15606 (An XSS issue was discovered in SalesAgility SuiteCRM 7.x before 7.8.21 ...)
-	TODO: check
+	NOT-FOR-US: SuiteCRM
 CVE-2018-15605 (An issue was discovered in phpMyAdmin before 4.8.3. A Cross-Site ...)
 	- phpmyadmin <not-affected> (Vulnerable code introduced later)
 	NOTE: https://www.phpmyadmin.net/security/PMASA-2018-5/
@@ -6426,7 +6426,7 @@ CVE-2018-14805 (ABB eSOMS version 6.0.2 may allow unauthorized access to the sys
 CVE-2018-14804
 	RESERVED
 CVE-2018-14803 (Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The ...)
-	TODO: check
+	NOT-FOR-US: Philips e-Alert Unit
 CVE-2018-14802
 	RESERVED
 CVE-2018-14801 (In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all ...)
@@ -16193,7 +16193,7 @@ CVE-2018-11073
 CVE-2018-11072
 	RESERVED
 CVE-2018-11071 (Dell EMC Isilon OneFS versions 7.1.1.x, 7.2.1.x, 8.0.0.x, 8.0.1.x, ...)
-	TODO: check
+	NOT-FOR-US: EMC Isilon OneFS
 CVE-2018-11070 (RSA BSAFE Crypto-J versions prior to 6.2.4 and RSA BSAFE SSL-J ...)
 	NOT-FOR-US: RSA BSAFE Crypto-J
 CVE-2018-11069 (RSA BSAFE SSL-J versions prior to 6.2.4 contain a Covert Timing ...)
@@ -42120,7 +42120,7 @@ CVE-2018-1802
 CVE-2018-1801
 	RESERVED
 CVE-2018-1800 (IBM Sterling B2B Integrator Standard Edition 5.2.6.0 and 6.2.6.1 could ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2018-1799
 	RESERVED
 CVE-2018-1798
@@ -42150,13 +42150,13 @@ CVE-2018-1787
 CVE-2018-1786
 	RESERVED
 CVE-2018-1785 (IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2018-1784
 	RESERVED
 CVE-2018-1783
 	RESERVED
 CVE-2018-1782 (IBM GPFS (IBM Spectrum Scale 5.0.1.0 and 5.0.1.1) allows a local, ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2018-1781
 	RESERVED
 CVE-2018-1780
@@ -42184,7 +42184,7 @@ CVE-2018-1770
 CVE-2018-1769
 	RESERVED
 CVE-2018-1768 (IBM Spectrum Protect Plus 10.1.0 and 10.1.1 could disclose sensitive ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2018-1767
 	RESERVED
 CVE-2018-1766
@@ -42298,9 +42298,9 @@ CVE-2018-1713
 CVE-2018-1712 (IBM API Connect's Developer Portal 5.0.0.0 through 5.0.8.3 is ...)
 	NOT-FOR-US: IBM
 CVE-2018-1711 (IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2018-1710 (IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2018-1709
 	RESERVED
 CVE-2018-1708
@@ -42350,11 +42350,11 @@ CVE-2018-1687
 CVE-2018-1686
 	RESERVED
 CVE-2018-1685 (IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2018-1684
 	RESERVED
 CVE-2018-1683 (IBM WebSphere Application Server Liberty could allow a remote attacker ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2018-1682
 	RESERVED
 CVE-2018-1681
@@ -42372,7 +42372,7 @@ CVE-2018-1676 (IBM Planning Analytics 2.0.0 through 2.0.4 is vulnerable to cross
 CVE-2018-1675
 	RESERVED
 CVE-2018-1674 (IBM Business Process Manager 8.5 through 8.6 and 18.0.0.0 through ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2018-1673
 	RESERVED
 CVE-2018-1672
@@ -42382,7 +42382,7 @@ CVE-2018-1671
 CVE-2018-1670
 	RESERVED
 CVE-2018-1669 (IBM DataPower Gateway 7.1.0.0 - 7.1.0.23, 7.2.0.0 - 7.2.0.21, 7.5.0.0 ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2018-1668
 	RESERVED
 CVE-2018-1667
@@ -42392,7 +42392,7 @@ CVE-2018-1666
 CVE-2018-1665
 	RESERVED
 CVE-2018-1664 (IBM DataPower Gateway 7.1.0.0 - 7.1.0.23, 7.2.0.0 - 7.2.0.21, 7.5.0.0 ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2018-1663
 	RESERVED
 CVE-2018-1662
@@ -42402,7 +42402,7 @@ CVE-2018-1661
 CVE-2018-1660
 	RESERVED
 CVE-2018-1659 (IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2018-1658
 	RESERVED
 CVE-2018-1657
@@ -42500,13 +42500,13 @@ CVE-2018-1612 (IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) coul
 CVE-2018-1611
 	RESERVED
 CVE-2018-1610 (IBM Rational DOORS Next Generation 5.0 through 5.0.2 and 6.0 through ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2018-1609
 	RESERVED
 CVE-2018-1608
 	RESERVED
 CVE-2018-1607 (IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2018-1606
 	RESERVED
 CVE-2018-1605
@@ -42544,7 +42544,7 @@ CVE-2018-1590
 CVE-2018-1589
 	RESERVED
 CVE-2018-1588 (IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2018-1587 (IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through ...)
 	NOT-FOR-US: IBM Rational Rhapsody Design Manager
 CVE-2018-1586
@@ -42600,7 +42600,7 @@ CVE-2018-1562
 CVE-2018-1561
 	RESERVED
 CVE-2018-1560 (IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2018-1559
 	RESERVED
 CVE-2018-1558
@@ -42620,7 +42620,7 @@ CVE-2018-1552
 CVE-2018-1551 (IBM WebSphere MQ 8.0.0.2 through 8.0.0.8 and 9.0.0.0 through 9.0.0.3 ...)
 	NOT-FOR-US: IBM
 CVE-2018-1550 (IBM Spectrum Protect 7.1 and 8.1 could allow a local user to corrupt ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2018-1549 (IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 ...)
 	NOT-FOR-US: IBM
 CVE-2018-1548 (IBM API Connect 2018.1.0.0, 2018.2.1, 2018.2.2, 2018.2.3, and 2018.2.4 ...)
@@ -42630,7 +42630,7 @@ CVE-2018-1547 (IBM Robotic Process Automation with Automation Anywhere 10.0 coul
 CVE-2018-1546 (IBM API Connect 5.0.0.0 through 5.0.8.3 could allow a remote attacker ...)
 	NOT-FOR-US: IBM API Connect
 CVE-2018-1545 (IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2018-1544 (IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, ...)
 	NOT-FOR-US: IBM
 CVE-2018-1543 (IBM WebSphere MQ 8.0 and 9.0 could allow a remote attacker to obtain ...)
@@ -42642,7 +42642,7 @@ CVE-2018-1541
 CVE-2018-1540
 	RESERVED
 CVE-2018-1539 (IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2018-1538
 	RESERVED
 CVE-2018-1537
@@ -94318,7 +94318,7 @@ CVE-2017-1796
 CVE-2017-1795 (IBM WebSphere MQ 7.5, 8.0, and 9.0 through 9.0.4 could allow a local ...)
 	NOT-FOR-US: IBM WebSphere MQ
 CVE-2017-1794 (IBM Tivoli Monitoring 6.2.3 through 6.2.3.5 and 6.3.0 through 6.3.0.7 ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2017-1793 (IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 ...)
 	NOT-FOR-US: IBM
 CVE-2017-1792 (IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/7b1ab2c07aaeb735f6b334c922c3765208e8b299

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/7b1ab2c07aaeb735f6b334c922c3765208e8b299
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180926/cad4f6aa/attachment.html>

More information about the debian-security-tracker-commits mailing list