[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso carnil at debian.org
Thu Apr 15 09:22:52 BST 2021



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8610cde5 by Salvatore Bonaccorso at 2021-04-15T10:22:30+02:00
Process NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3628,7 +3628,7 @@ CVE-2020-36290
 CVE-2020-36289
 	RESERVED
 CVE-2020-36288 (The issue navigation and search view in Jira Server and Data Center be ...)
-	TODO: check
+	NOT-FOR-US: Atlassian
 CVE-2020-36287 (The dashboard gadgets preference resource of the Atlassian gadgets plu ...)
 	NOT-FOR-US: Atlassian
 CVE-2020-36286 (The membersOf JQL search function in Jira Server and Data Center befor ...)
@@ -6983,7 +6983,7 @@ CVE-2021-28159
 CVE-2021-28158
 	RESERVED
 CVE-2021-28157 (An SQL Injection issue in Devolutions Server before 2021.1 and Devolut ...)
-	TODO: check
+	NOT-FOR-US: Devolutions Server
 CVE-2021-28156
 	RESERVED
 CVE-2021-28155
@@ -7355,7 +7355,7 @@ CVE-2009-20001 (An issue was discovered in MantisBT before 2.24.5. It associates
 CVE-2021-28049
 	RESERVED
 CVE-2021-28048 (An overly permissive CORS policy in Devolutions Server before 2021.1 a ...)
-	TODO: check
+	NOT-FOR-US: Devolutions Server
 CVE-2021-28047 (Cross-Site Scripting (XSS) in Administrative Reports in Devolutions Re ...)
 	NOT-FOR-US: Devolutions Remote Desktop Manager
 CVE-2021-28046
@@ -9319,13 +9319,13 @@ CVE-2021-27185 (The samba-client package before 4.0.0 for Node.js allows command
 CVE-2021-27184 (Pelco Digital Sentry Server 7.18.72.11464 has an XML External Entity v ...)
 	NOT-FOR-US: Pelco Digital Sentry Server
 CVE-2021-27183 (An issue was discovered in MDaemon before 20.0.4. Administrators can u ...)
-	TODO: check
+	NOT-FOR-US: MDaemon
 CVE-2021-27182 (An issue was discovered in MDaemon before 20.0.4. There is an IFRAME i ...)
-	TODO: check
+	NOT-FOR-US: MDaemon
 CVE-2021-27181 (An issue was discovered in MDaemon before 20.0.4. Remote Administratio ...)
-	TODO: check
+	NOT-FOR-US: MDaemon
 CVE-2021-27180 (An issue was discovered in MDaemon before 20.0.4. There is Reflected X ...)
-	TODO: check
+	NOT-FOR-US: MDaemon
 CVE-2021-27179 (An issue was discovered on FiberHome HG6245D devices through RP2613. I ...)
 	NOT-FOR-US: FiberHome devices
 CVE-2021-27178 (An issue was discovered on FiberHome HG6245D devices through RP2613. S ...)
@@ -12024,9 +12024,9 @@ CVE-2021-26078
 CVE-2021-26077
 	RESERVED
 CVE-2021-26076 (The jira.editor.user.mode cookie set by the Jira Editor Plugin in Jira ...)
-	TODO: check
+	NOT-FOR-US: Atlassian
 CVE-2021-26075 (The Jira importers plugin AttachTemporaryFile rest resource in Jira Se ...)
-	TODO: check
+	NOT-FOR-US: Atlassian
 CVE-2021-26074
 	RESERVED
 CVE-2021-26073



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8610cde5b2df9acecfc174037f3a77266afdb1a8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8610cde5b2df9acecfc174037f3a77266afdb1a8
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210415/dea8e4a0/attachment.htm>


More information about the debian-security-tracker-commits mailing list