[Git][security-tracker-team/security-tracker][master] NFUs (concludes external check)

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
54af27ab by Moritz Muehlenhoff at 2021-06-07T11:21:07+02:00
NFUs (concludes external check)

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -248,7 +248,7 @@ CVE-2021-3571
 CVE-2021-3570
 	RESERVED
 CVE-2020-36382 (OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigge ...)
-	TODO: check
+	NOT-FOR-US: OpenVPN Access Server (security impact for src:openvpn covered by CVE-2020-15078)
 CVE-2021-33790 (The RebornCore library before 4.7.3 allows remote code execution becau ...)
 	NOT-FOR-US: RebornCore
 CVE-2021-33789
@@ -73233,7 +73233,7 @@ CVE-2020-15078 (OpenVPN 2.5.1 and earlier versions allows a remote attackers to
 	NOTE: https://github.com/OpenVPN/openvpn/commit/3aca477a1b58714754fea3a26d0892fffc51db6b (v2.5.2)
 	NOTE: https://github.com/OpenVPN/openvpn/commit/0e5516a9d656ce86f7fb370c824344ea1760c255 (2.4.11)
 CVE-2020-15077 (OpenVPN Access Server 2.8.7 and earlier versions allows a remote attac ...)
-	TODO: check
+	NOT-FOR-US: OpenVPN Access Server (security impact for src:openvpn covered by CVE-2020-15078)
 CVE-2020-15076 (Private Tunnel installer for macOS version 3.0.1 and older versions ma ...)
 	NOT-FOR-US: Private Tunnel installer for macOS
 CVE-2020-15075 (OpenVPN Connect installer for macOS version 3.2.6 and older may corrup ...)
@@ -109793,7 +109793,7 @@ CVE-2020-1922
 CVE-2020-1921 (In the crypt function, we attempt to null terminate a buffer using the ...)
 	- hhvm <removed>
 CVE-2020-1920 (A regular expression denial of service (ReDoS) vulnerability in the va ...)
-	TODO: check
+	NOT-FOR-US: react-native
 CVE-2020-1919 (Incorrect bounds calculations in substr_compare could lead to an out-o ...)
 	- hhvm <removed>
 CVE-2020-1918 (In-memory file operations (ie: using fopen on a data URI) did not prop ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/54af27abdbef13379195d065cb9873c4be082634

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/54af27abdbef13379195d065cb9873c4be082634
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210607/c44e26e9/attachment.htm>