[Git][security-tracker-team/security-tracker][master] Process NFUs

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
74f45cf5 by Salvatore Bonaccorso at 2020-06-15T22:46:34+02:00
Process NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5,13 +5,13 @@ CVE-2020-14161
 CVE-2020-14160
 	RESERVED
 CVE-2020-14159 (By using an Automate API in ConnectWise Automate before 2020.5.178, a  ...)
-	TODO: check
+	NOT-FOR-US: ConnectWise
 CVE-2020-14158
 	RESERVED
 CVE-2020-14157
 	RESERVED
 CVE-2020-14156 (user_channel/passwd_mgr.cpp in OpenBMC phosphor-host-ipmid before 2020 ...)
-	TODO: check
+	NOT-FOR-US: OpenBMC
 CVE-2020-14155 (libpcre in PCRE before 8.44 allows an integer overflow via a large num ...)
 	- pcre3 <unfixed>
 	NOTE: Fixed by: https://vcs.pcre.org/pcre?view=revision&revision=1761 (8.44)
@@ -31,13 +31,13 @@ CVE-2020-14150 (GNU Bison before 3.5.4 allows attackers to cause a denial of ser
 	- bison 2:3.6.1+dfsg-1
 	NOTE: https://lists.gnu.org/archive/html/info-gnu/2020-04/msg00000.html
 CVE-2020-14149 (In uftpd before 2.12, handle_CWD in ftpcmd.c mishandled the path provi ...)
-	TODO: check
+	NOT-FOR-US: uftpd
 CVE-2020-14148 (The Server-Server protocol implementation in ngIRCd before 26~rc2 allo ...)
 	TODO: check
 CVE-2020-14147 (An integer overflow in the getnum function in lua_struct.c in Redis be ...)
 	TODO: check
 CVE-2020-14146 (KumbiaPHP through 1.1.1, in Development mode, allows XSS via the publi ...)
-	TODO: check
+	NOT-FOR-US: KumbiaPHP
 CVE-2020-14145
 	RESERVED
 CVE-2020-14144
@@ -187,7 +187,7 @@ CVE-2020-14078 (TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-base
 CVE-2020-14077 (TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buff ...)
 	NOT-FOR-US: TRENDnet
 CVE-2020-14076 (TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buff ...)
-	TODO: check
+	NOT-FOR-US: TRENDnet TEW-827DRU devices
 CVE-2020-14075 (TRENDnet TEW-827DRU devices through 2.06B04 contain multiple command i ...)
 	NOT-FOR-US: TRENDnet
 CVE-2020-14074 (TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buff ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/74f45cf5f982df670637a76e0232b411a76997c0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/74f45cf5f982df670637a76e0232b411a76997c0
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200615/86888840/attachment.html>