[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso carnil at debian.org
Wed Jan 15 20:31:02 GMT 2020 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
873cc2c0 by Salvatore Bonaccorso at 2020-01-15T21:30:27+01:00
Process NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -6955,7 +6955,7 @@ CVE-2020-3943
 CVE-2020-3942
 	RESERVED
 CVE-2020-3941 (The repair operation of VMware Tools for Windows 10.x.y has a race con ...)
-	TODO: check
+	NOT-FOR-US: VMware Tools for Windows
 CVE-2020-3940
 	RESERVED
 CVE-2019-20149 (ctorName in index.js in kind-of v6.0.2 allows external user input to o ...)
@@ -10535,13 +10535,13 @@ CVE-2020-2733
 CVE-2020-2732
 	RESERVED
 CVE-2020-2731 (Vulnerability in the Core RDBMS component of Oracle Database Server. S ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2730 (Vulnerability in the Oracle Financial Services Revenue Management and  ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2729 (Vulnerability in the Identity Manager product of Oracle Fusion Middlew ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2728 (Vulnerability in the Identity Manager product of Oracle Fusion Middlew ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2727 (Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza ...)
 	- virtualbox 6.1.2-dfsg-1
 	[jessie] - virtualbox <end-of-life> (DSA-3699-1)
@@ -10552,41 +10552,41 @@ CVE-2020-2725 (Vulnerability in the Oracle VM VirtualBox product of Oracle Virtu
 	- virtualbox 6.1.2-dfsg-1
 	[jessie] - virtualbox <end-of-life> (DSA-3699-1)
 CVE-2020-2724 (Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Ora ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2723 (Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Ora ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2722 (Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Ora ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2721 (Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Ora ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2720 (Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Ora ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2719 (Vulnerability in the Oracle Banking Corporate Lending product of Oracl ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2718 (Vulnerability in the Oracle Banking Corporate Lending product of Oracl ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2717 (Vulnerability in the Oracle Banking Corporate Lending product of Oracl ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2716 (Vulnerability in the Oracle Banking Corporate Lending product of Oracl ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2715 (Vulnerability in the Oracle Banking Corporate Lending product of Oracl ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2714 (Vulnerability in the Oracle Banking Payments product of Oracle Financi ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2713 (Vulnerability in the Oracle Banking Payments product of Oracle Financi ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2712 (Vulnerability in the Oracle Banking Payments product of Oracle Financi ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2711 (Vulnerability in the Oracle Banking Payments product of Oracle Financi ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2710 (Vulnerability in the Oracle Banking Payments product of Oracle Financi ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2709 (Vulnerability in the Oracle iLearning product of Oracle iLearning (com ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2708
 	RESERVED
 CVE-2020-2707 (Vulnerability in the Primavera P6 Enterprise Project Portfolio Managem ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2706
 	RESERVED
 CVE-2020-2705 (Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza ...)
@@ -10605,18 +10605,18 @@ CVE-2020-2701 (Vulnerability in the Oracle VM VirtualBox product of Oracle Virtu
 	- virtualbox 6.1.2-dfsg-1
 	[jessie] - virtualbox <end-of-life> (DSA-3699-1)
 CVE-2020-2700 (Vulnerability in the Oracle FLEXCUBE Universal Banking product of Orac ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2699 (Vulnerability in the Oracle FLEXCUBE Universal Banking product of Orac ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2698 (Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza ...)
 	- virtualbox 6.1.2-dfsg-1
 	[jessie] - virtualbox <end-of-life> (DSA-3699-1)
 CVE-2020-2697 (Vulnerability in the Oracle Hospitality Suites Management component of ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2696 (Vulnerability in the Oracle Solaris product of Oracle Systems (compone ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2695 (Vulnerability in the PeopleSoft Enterprise CC Common Application Objec ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2694 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
 	- mysql-5.7 <not-affected> (MySQL 8 only)
 	NOTE: https://www.oracle.com/security-alerts/cpujan2020.html#AppendixMSQL
@@ -10636,18 +10636,18 @@ CVE-2020-2689 (Vulnerability in the Oracle VM VirtualBox product of Oracle Virtu
 	- virtualbox 6.1.2-dfsg-1
 	[jessie] - virtualbox <end-of-life> (DSA-3699-1)
 CVE-2020-2688 (Vulnerability in the Oracle Financial Services Analytical Applications ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2687 (Vulnerability in the PeopleSoft Enterprise PeopleTools product of Orac ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2686 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
 	- mysql-5.7 <not-affected> (Only affects MySQL 8)
 	NOTE: https://www.oracle.com/security-alerts/cpujan2020.html#AppendixMSQL
 CVE-2020-2685 (Vulnerability in the Oracle FLEXCUBE Universal Banking product of Orac ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2684 (Vulnerability in the Oracle FLEXCUBE Universal Banking product of Orac ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2683 (Vulnerability in the Oracle FLEXCUBE Universal Banking product of Orac ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2682 (Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza ...)
 	- virtualbox 6.1.2-dfsg-1
 	[jessie] - virtualbox <end-of-life> (DSA-3699-1)
@@ -10655,7 +10655,7 @@ CVE-2020-2681 (Vulnerability in the Oracle VM VirtualBox product of Oracle Virtu
 	- virtualbox 6.1.2-dfsg-1
 	[jessie] - virtualbox <end-of-life> (DSA-3699-1)
 CVE-2020-2680 (Vulnerability in the Oracle Solaris product of Oracle Systems (compone ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2679 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
 	- mysql-5.7 <not-affected> (Only affects MySQL 8)
 	NOTE: https://www.oracle.com/security-alerts/cpujan2020.html#AppendixMSQL
@@ -10663,26 +10663,26 @@ CVE-2020-2678 (Vulnerability in the Oracle VM VirtualBox product of Oracle Virtu
 	- virtualbox 6.1.2-dfsg-1
 	[jessie] - virtualbox <end-of-life> (DSA-3699-1)
 CVE-2020-2677 (Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hosp ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2676 (Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hosp ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2675 (Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hosp ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2674 (Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza ...)
 	- virtualbox 6.1.2-dfsg-1
 	[jessie] - virtualbox <end-of-life> (DSA-3699-1)
 CVE-2020-2673 (Vulnerability in the Oracle Application Testing Suite product of Oracl ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2672 (Vulnerability in the Oracle Email Center product of Oracle E-Business  ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2671 (Vulnerability in the Oracle Email Center product of Oracle E-Business  ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2670 (Vulnerability in the Oracle Email Center product of Oracle E-Business  ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2669 (Vulnerability in the Oracle Email Center product of Oracle E-Business  ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2668 (Vulnerability in the Oracle iSupport product of Oracle E-Business Suit ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2020-2667 (Vulnerability in the Oracle iSupport product of Oracle E-Business Suit ...)
 	TODO: check
 CVE-2020-2666 (Vulnerability in the Oracle Applications Framework product of Oracle E ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/873cc2c09fc190ba732f7cf0bb2a2c4249443a52

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/873cc2c09fc190ba732f7cf0bb2a2c4249443a52
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200115/7135ebc1/attachment.html>

More information about the debian-security-tracker-commits mailing list