[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
eab2012e by Moritz Muehlenhoff at 2021-03-12T15:43:27+01:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -23210,7 +23210,7 @@ CVE-2021-1731 (PFX Encryption Security Feature Bypass Vulnerability ...)
 CVE-2021-1730 (Microsoft Exchange Server Spoofing Vulnerability This CVE ID is unique ...)
 	NOT-FOR-US: Microsoft
 CVE-2021-1729 (Windows Update Stack Setup Elevation of Privilege Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-1728 (System Center Operations Manager Elevation of Privilege Vulnerability ...)
 	NOT-FOR-US: Microsoft
 CVE-2021-1727 (Windows Installer Elevation of Privilege Vulnerability ...)
@@ -24408,7 +24408,7 @@ CVE-2020-29047 (The wp-hotel-booking plugin through 1.10.2 for WordPress allows
 CVE-2020-29046
 	RESERVED
 CVE-2020-29045 (The food-and-drink-menu plugin through 2.2.0 for WordPress allows remo ...)
-	TODO: check
+	NOT-FOR-US: Wordpress plugin
 CVE-2020-29044
 	RESERVED
 CVE-2020-29043 (An issue was discovered in BigBlueButton through 2.2.29. When at attac ...)
@@ -26896,7 +26896,7 @@ CVE-2020-28468 (This affects the package pwntools before 4.3.1. The shellcraft g
 CVE-2020-28467
 	RESERVED
 CVE-2020-28466 (This affects all versions of package github.com/nats-io/nats-server/se ...)
-	TODO: check
+	NOT-FOR-US: nats-server
 CVE-2020-28465
 	RESERVED
 CVE-2020-28464 (This affects the package djv before 2.1.4. By controlling the schema f ...)
@@ -28380,39 +28380,39 @@ CVE-2021-0467
 CVE-2021-0466
 	RESERVED
 CVE-2021-0465 (In GenerateFaceMask of face.cc, there is a possible out of bounds writ ...)
-	TODO: check
+	NOT-FOR-US: Android/Pixel kernel component not in mainline
 CVE-2021-0464 (In sound_trigger_event_alloc of platform.h, there is a possible out of ...)
-	TODO: check
+	NOT-FOR-US: Android/Pixel kernel component not in mainline
 CVE-2021-0463 (In convertToHidl of convert.cpp, there is a possible out of bounds rea ...)
-	TODO: check
+	NOT-FOR-US: Android/Pixel kernel component not in mainline
 CVE-2021-0462 (In the NXP NFC firmware, there is a possible insecure firmware update  ...)
-	TODO: check
+	NOT-FOR-US: NXP NFC firmware as used in Android/Pixel
 CVE-2021-0461 (In iaxxx_core_sensor_change_state of iaxxx-module.c, there is a possib ...)
-	TODO: check
+	NOT-FOR-US: Android/Pixel kernel component not in mainline
 CVE-2021-0460 (In the FingerTipS touch screen driver, there is a possible out of boun ...)
-	TODO: check
+	NOT-FOR-US: Android/Pixel kernel component not in mainline
 CVE-2021-0459 (In fts_driver_test_write of fts_proc.c, there is a possible out of bou ...)
-	TODO: check
+	NOT-FOR-US: Android/Pixel kernel component not in mainline
 CVE-2021-0458 (In the FingerTipS touch screen driver, there is a possible out of boun ...)
-	TODO: check
+	NOT-FOR-US: Android/Pixel kernel component not in mainline
 CVE-2021-0457 (In the FingerTipS touch screen driver, there is a possible out of boun ...)
-	TODO: check
+	NOT-FOR-US: Android/Pixel kernel component not in mainline
 CVE-2021-0456 (In the Citadel chip firmware, there is a possible out of bounds write  ...)
-	TODO: check
+	NOT-FOR-US: Citadel chip firmware as used in Android/Pixel
 CVE-2021-0455 (In the Citadel chip firmware, there is a possible out of bounds write  ...)
-	TODO: check
+	NOT-FOR-US: Citadel chip firmware as used in Android/Pixel
 CVE-2021-0454 (In the Citadel chip firmware, there is a possible out of bounds write  ...)
-	TODO: check
+	NOT-FOR-US: Citadel chip firmware as used in Android/Pixel
 CVE-2021-0453 (In the Titan-M chip firmware, there is a possible disclosure of stack  ...)
-	TODO: check
+	NOT-FOR-US: Titan-M chip firmware as used in Android/Pixel
 CVE-2021-0452 (In the Titan M chip firmware, there is a possible disclosure of stack  ...)
-	TODO: check
+	NOT-FOR-US: Titan-M chip firmware as used in Android/Pixel
 CVE-2021-0451 (In the Titan M chip firmware, there is a possible disclosure of stack  ...)
-	TODO: check
+	NOT-FOR-US: Titan-M chip firmware as used in Android/Pixel
 CVE-2021-0450 (In the Titan M chip firmware, there is a possible disclosure of stack  ...)
-	TODO: check
+	NOT-FOR-US: Titan-M chip firmware as used in Android/Pixel
 CVE-2021-0449 (In the Titan M chip firmware, there is a possible disclosure of stack  ...)
-	TODO: check
+	NOT-FOR-US: Titan-M chip firmware as used in Android/Pixel
 CVE-2021-0448
 	RESERVED
 CVE-2021-0447
@@ -37377,9 +37377,9 @@ CVE-2020-24986 (Concrete5 up to and including 8.5.2 allows Unrestricted Upload o
 CVE-2020-24985
 	RESERVED
 CVE-2020-24984 (An issue was discovered in Quadbase EspressReports ES 7 Update 9. It a ...)
-	TODO: check
+	NOT-FOR-US: Quadbase EspressReports
 CVE-2020-24983 (An issue was discovered in Quadbase EspressReports ES 7 Update 9. An u ...)
-	TODO: check
+	NOT-FOR-US: Quadbase EspressReports
 CVE-2020-24982
 	RESERVED
 CVE-2020-24981 (An Incorrect Access Control vulnerability exists in /ucms/chk.php in U ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eab2012e2185cb6b3e0a8b4424f7f9d73a880bc1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eab2012e2185cb6b3e0a8b4424f7f9d73a880bc1
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210312/a6ed174c/attachment.htm>