[Git][security-tracker-team/security-tracker][master] Process NFUs

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cc787213 by Salvatore Bonaccorso at 2019-12-07T14:19:48Z
Process NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -27067,7 +27067,7 @@ CVE-2019-11942 (A remote code execution vulnerability was identified in HPE Inte
 CVE-2019-11941 (A remote code execution vulnerability was identified in HPE Intelligen ...)
 	NOT-FOR-US: HPE
 CVE-2019-11940 (In the course of decompressing HPACK inside the HTTP2 protocol, an une ...)
-	TODO: check
+	NOT-FOR-US: Facebook Proxygen
 CVE-2019-11939
 	RESERVED
 CVE-2019-11938
@@ -30470,7 +30470,7 @@ CVE-2019-10771 (Characters in the GET url path are not properly escaped and can
 CVE-2019-10770
 	RESERVED
 CVE-2019-10769 (safer-eval is a npm package to sandbox the he evaluation of code used  ...)
-	TODO: check
+	NOT-FOR-US: safer-eval Node module
 CVE-2019-10768 (In AngularJS before 1.7.9 the function `merge()` could be tricked into ...)
 	- angular.js 1.7.9-1 (bug #945249)
 	[buster] - angular.js <no-dsa> (Minor issue; can be fixed via point release)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/cc787213238029388eafb41cf5426b05afbed72f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/cc787213238029388eafb41cf5426b05afbed72f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191207/6171d47f/attachment-0001.html>