[Git][security-tracker-team/security-tracker][master] Process more NFUs

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2e15bee4 by Salvatore Bonaccorso at 2019-11-19T20:00:25Z
Process more NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -246,7 +246,7 @@ CVE-2019-19012 (An integer overflow in the search_in_range function in regexec.c
 	- libonig <unfixed> (bug #944959)
 	NOTE: https://github.com/kkos/oniguruma/issues/164
 CVE-2019-19011 (MiniUPnP ngiflib 0.4 has a NULL pointer dereference in GifIndexToTrueC ...)
-	TODO: check
+	NOT-FOR-US: ngiflib
 CVE-2019-19010 (Eval injection in the Math plugin of Limnoria (before 2019.11.09) and  ...)
 	- limnoria 2019.11.09-1
 	[buster] - limnoria <no-dsa> (Minor issue, can be fixed via point release)
@@ -27405,7 +27405,7 @@ CVE-2019-10766
 CVE-2019-10765
 	RESERVED
 CVE-2019-10764 (In elliptic-php versions priot to 1.0.6, Timing attacks might be possi ...)
-	TODO: check
+	NOT-FOR-US: elliptic-php
 CVE-2019-10763 (pimcore/pimcore before 6.3.0 is vulnerable to SQL Injection. An attack ...)
 	NOT-FOR-US: Pimcore
 CVE-2019-10762 (columnQuote in medoo before 1.7.5 allows remote attackers to perform a ...)
@@ -40860,7 +40860,7 @@ CVE-2018-20689
 CVE-2018-20688
 	RESERVED
 CVE-2018-20687 (An XML external entity (XXE) vulnerability in CommandCenterWebServices ...)
-	TODO: check
+	NOT-FOR-US: Raritan CommandCenter Secure Gateway
 CVE-2018-20686
 	RESERVED
 CVE-2018-20684 (In WinSCP before 5.14 beta, due to missing validation, the scp impleme ...)
@@ -42057,7 +42057,7 @@ CVE-2019-5690 (NVIDIA Windows GPU Display Driver, all versions, contains a vulne
 CVE-2019-5689 (NVIDIA GeForce Experience, all versions prior to 3.20.1, contains a vu ...)
 	NOT-FOR-US: NVIDIA GeForce Experience
 CVE-2019-5688 (NVIDIA NVFlash, NVUFlash Tool prior to v5.588.0 and GPUModeSwitch Tool ...)
-	TODO: check
+	NOT-FOR-US: NVIDIA
 CVE-2019-5687 (NVIDIA Windows GPU Display Driver (all versions) contains a vulnerabil ...)
 	NOT-FOR-US: NVIDIA Windows driver
 CVE-2019-5686 (NVIDIA Windows GPU Display Driver (all versions) contains a vulnerabil ...)
@@ -43343,9 +43343,9 @@ CVE-2019-5104
 CVE-2019-5103
 	RESERVED
 CVE-2019-5102 (An exploitable information leak vulnerability exists in the ustream-ss ...)
-	TODO: check
+	NOT-FOR-US: ustream-ssl library of OpenWrt
 CVE-2019-5101 (An exploitable information leak vulnerability exists in the ustream-ss ...)
-	TODO: check
+	NOT-FOR-US: ustream-ssl library of OpenWrt
 CVE-2019-5100 (An exploitable integer overflow vulnerability exists in the BMP header ...)
 	NOT-FOR-US: LEADTOOLS
 CVE-2019-5099 (An exploitable integer underflow vulnerability exists in the CMP-parsi ...)
@@ -74105,7 +74105,7 @@ CVE-2018-13258 (Mediawiki 1.31 before 1.31.1 misses .htaccess files in the provi
 	NOTE: https://lists.wikimedia.org/pipermail/wikitech-l/2018-September/090849.html
 	NOTE: https://phabricator.wikimedia.org/T199029
 CVE-2018-13257 (The bb-auth-provider-cas authentication module within Blackboard Learn ...)
-	TODO: check
+	NOT-FOR-US: Blackboard Learn
 CVE-2018-13256 (PHP Scripts Mall Auditor Website 2.0.1 has XSS via the lastname or fir ...)
 	NOT-FOR-US: PHP Scripts Mall Auditor Website
 CVE-2018-13255



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/2e15bee4ea19e7991bc7aff543f9d748e28bfd5a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/2e15bee4ea19e7991bc7aff543f9d748e28bfd5a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191119/32fdf631/attachment.html>