[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso carnil at debian.org
Sat Jun 20 09:24:56 BST 2020



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
15a0a0b8 by Salvatore Bonaccorso at 2020-06-20T10:24:28+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,9 +1,9 @@
 CVE-2020-14931 (A stack-based buffer overflow in DMitry (Deepmagic Information Gatheri ...)
-	TODO: check
+	NOT-FOR-US: DMitry
 CVE-2020-14930 (An issue was discovered in BT CTROMS Terminal OS Port Portal CT-464. A ...)
-	TODO: check
+	NOT-FOR-US: BT CTROMS Terminal OS Port Portal CT-464
 CVE-2019-20891 (WooCommerce before 3.6.5, when it handles CSV imports of products, has ...)
-	TODO: check
+	NOT-FOR-US: WooCommerce
 CVE-2020-14929 (Alpine before 2.23 silently proceeds to use an insecure connection aft ...)
 	- alpine <unfixed> (bug #963179)
 	NOTE: http://mailman13.u.washington.edu/pipermail/alpine-info/2020-June/008989.html
@@ -1110,23 +1110,23 @@ CVE-2018-21249 (An issue was discovered in Mattermost Server before 5.3.0. It mi
 CVE-2018-21248 (An issue was discovered in Mattermost Server before 5.4.0. It mishandl ...)
 	NOT-FOR-US: Mattermost
 CVE-2017-18921 (An issue was discovered in Mattermost Server before 3.6.0 and 3.5.2. X ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2017-18920 (An issue was discovered in Mattermost Server before 3.6.2. The WebSock ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2017-18919 (An issue was discovered in Mattermost Server before 3.7.0 and 3.6.3. A ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2017-18918 (An issue was discovered in Mattermost Server before 3.7.3 and 3.6.5. A ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2017-18917 (An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and  ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2017-18916 (An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and  ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2017-18915 (An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and  ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2017-18914 (An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and  ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2017-18913 (An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and  ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2017-18912 (An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and  ...)
 	NOT-FOR-US: Mattermost
 CVE-2017-18911 (An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and  ...)
@@ -1136,13 +1136,13 @@ CVE-2017-18910 (An issue was discovered in Mattermost Server before 3.8.2, 3.7.5
 CVE-2017-18909 (An issue was discovered in Mattermost Server before 3.9.0 when SAML is ...)
 	NOT-FOR-US: Mattermost
 CVE-2017-18908 (An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2017-18907 (An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2017-18906 (An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2017-18905 (An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2017-18904 (An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and ...)
 	NOT-FOR-US: Mattermost
 CVE-2017-18903 (An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and ...)
@@ -1214,53 +1214,53 @@ CVE-2017-18871 (An issue was discovered in Mattermost Server before 4.5.0, 4.4.5
 CVE-2017-18870 (An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, and  ...)
 	NOT-FOR-US: Mattermost
 CVE-2016-11084 (An issue was discovered in Mattermost Server before 2.1.0. It allows X ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2016-11083 (An issue was discovered in Mattermost Server before 2.2.0. It allows X ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2016-11082 (An issue was discovered in Mattermost Server before 2.2.0. It allows X ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2016-11081 (An issue was discovered in Mattermost Server before 2.2.0. It allows u ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2016-11080 (An issue was discovered in Mattermost Server before 3.0.0. It offers s ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2016-11079 (An issue was discovered in Mattermost Server before 3.0.0. It allows X ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2016-11078 (An issue was discovered in Mattermost Server before 3.0.0. It potentia ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2016-11077 (An issue was discovered in Mattermost Server before 3.0.0. It has a su ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2016-11076 (An issue was discovered in Mattermost Server before 3.0.0. It does not ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2016-11075 (An issue was discovered in Mattermost Server before 3.0.0. It allows a ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2016-11074 (An issue was discovered in Mattermost Server before 3.0.0. A password- ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2016-11073 (An issue was discovered in Mattermost Server before 3.0.0. It allows X ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2016-11072 (An issue was discovered in Mattermost Server before 3.0.2. The purpose ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2016-11071 (An issue was discovered in Mattermost Server before 3.1.0. It allows X ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2016-11070 (An issue was discovered in Mattermost Server before 3.1.0. It allows X ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2016-11069 (An issue was discovered in Mattermost Server before 3.2.0. It mishandl ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2016-11068 (An issue was discovered in Mattermost Server before 3.2.0. Attackers c ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2016-11067 (An issue was discovered in Mattermost Server before 3.2.0. It allowed  ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2016-11066 (An issue was discovered in Mattermost Server before 3.2.0. The initial ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2016-11065 (An issue was discovered in Mattermost Server before 3.3.0. An attacker ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2016-11064 (An issue was discovered in Mattermost Desktop App before 3.4.0. String ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2016-11063 (An issue was discovered in Mattermost Server before 3.5.1. XSS can occ ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2016-11062 (An issue was discovered in Mattermost Server before 3.5.1. E-mail addr ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2015-9548 (An issue was discovered in Mattermost Server before 1.2.0. It allows a ...)
-	TODO: check
+	NOT-FOR-US: Mattermost
 CVE-2020-XXXX [MITM response injection attack when using STARTTLS with IMAP, POP3 and SMTP]
 	- mutt 1.14.4-1
 	[stretch] - mutt 1.7.2-1+deb9u3



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/15a0a0b8a9212a9b3160ad25da9aef745eb9f7b1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/15a0a0b8a9212a9b3160ad25da9aef745eb9f7b1
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200620/700ece98/attachment.html>


More information about the debian-security-tracker-commits mailing list