[Git][security-tracker-team/security-tracker][master] Process some more NFUs

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
daabe39a by Salvatore Bonaccorso at 2021-01-07T09:41:46+01:00
Process some more NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1097,7 +1097,7 @@ CVE-2020-36179 (FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the in
 	NOTE: Starting from 2.10 series mitigated as Safe Default Typing is enabled by default
 	NOTE: but still an issue when Default Typing is enabled.
 CVE-2020-36178 (oal_ipt_addBridgeIsolationRules on TP-Link TL-WR840N 6_EU_0.9.1_4.16 d ...)
-	TODO: check
+	NOT-FOR-US: TP-Link
 CVE-2021-3029
 	RESERVED
 CVE-2021-3028
@@ -8626,7 +8626,7 @@ CVE-2020-35264
 CVE-2020-35263
 	RESERVED
 CVE-2020-35262 (Cross Site Scripting (XSS) vulnerability in Digisol DG-HR3400 can be e ...)
-	TODO: check
+	NOT-FOR-US: Digisol
 CVE-2020-35261
 	RESERVED
 CVE-2020-35260
@@ -12176,7 +12176,7 @@ CVE-2020-29043 (An issue was discovered in BigBlueButton through 2.2.29. When at
 CVE-2020-29042 (An issue was discovered in BigBlueButton through 2.2.29. A brute-force ...)
 	NOT-FOR-US: BigBlueButton
 CVE-2020-29041 (A misconfiguration in Web-Sesame 2020.1.1.3375 allows an unauthenticat ...)
-	TODO: check
+	NOT-FOR-US: Web-Sesame
 CVE-2020-29040 (An issue was discovered in Xen through 4.14.x allowing x86 HVM guest O ...)
 	- xen 4.14.0+88-g1d1d1f5391-1 (bug #976109)
 	[buster] - xen <not-affected> (Patches for XSA-346 not applied)
@@ -23791,7 +23791,7 @@ CVE-2020-25500
 CVE-2020-25499 (TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote use ...)
 	NOT-FOR-US: TOTOLINK
 CVE-2020-25498 (Cross Site Scripting (XSS) vulnerability in Beetel router 777VR1 can b ...)
-	TODO: check
+	NOT-FOR-US: Beetel
 CVE-2020-25497
 	RESERVED
 CVE-2020-25496
@@ -65263,9 +65263,9 @@ CVE-2020-8277 (A Node.js application that allows an attacker to trigger a DNS re
 CVE-2020-8276 (The implementation of Brave Desktop's privacy-preserving analytics sys ...)
 	NOT-FOR-US: Brave
 CVE-2020-8275 (Citrix Secure Mail for Android before 20.11.0 suffers from improper ac ...)
-	TODO: check
+	NOT-FOR-US: Citrix
 CVE-2020-8274 (Citrix Secure Mail for Android before 20.11.0 suffers from Improper Co ...)
-	TODO: check
+	NOT-FOR-US: Citrix
 CVE-2020-8273 (Privilege escalation of an authenticated user to root in Citrix SD-WAN ...)
 	NOT-FOR-US: Citrix SD-WAN center
 CVE-2020-8272 (Authentication Bypass resulting in exposure of SD-WAN functionality in ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/daabe39a149cd80a77eb90741ac9d75bca5c12fb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/daabe39a149cd80a77eb90741ac9d75bca5c12fb
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210107/c0eccf99/attachment.html>