[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c92f00d3 by Salvatore Bonaccorso at 2021-03-17T09:44:37+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -564,9 +564,9 @@ CVE-2021-28383
 CVE-2021-28382
 	RESERVED
 CVE-2021-28381 (The vhs (aka VHS: Fluid ViewHelpers) extension before 5.1.1 for TYPO3  ...)
-	TODO: check
+	NOT-FOR-US: vhs (aka VHS: Fluid ViewHelpers) extension for TYPO3
 CVE-2021-28380 (The aimeos (aka Aimeos shop and e-commerce framework) extension before ...)
-	TODO: check
+	NOT-FOR-US: aimeos (aka Aimeos shop and e-commerce framework) extension for TYPO3
 CVE-2021-28379 (web/upload/UploadHandler.php in Vesta Control Panel (aka VestaCP) thro ...)
 	NOT-FOR-US: Vesta Control Panel
 CVE-2021-28378 (Gitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain issue dat ...)
@@ -745,9 +745,9 @@ CVE-2021-28297
 CVE-2021-28296
 	RESERVED
 CVE-2021-28295 (Online Ordering System 1.0 is vulnerable to unauthenticated SQL inject ...)
-	TODO: check
+	NOT-FOR-US: Online Ordering System
 CVE-2021-28294 (Online Ordering System 1.0 is vulnerable to arbitrary file upload thro ...)
-	TODO: check
+	NOT-FOR-US: Online Ordering System
 CVE-2021-28293
 	RESERVED
 CVE-2021-28292
@@ -39997,9 +39997,9 @@ CVE-2020-24265 (An issue was discovered in tcpreplay tcpprep v4.3.3. There is a
 	NOTE: https://github.com/appneta/tcpreplay/issues/616
 	NOTE: Crash in CLI tool, no security impact
 CVE-2020-24264 (Portainer 1.24.1 and earlier is affected by incorrect access control t ...)
-	TODO: check
+	NOT-FOR-US: Portainer
 CVE-2020-24263 (Portainer 1.24.1 and earlier is affected by an insecure permissions vu ...)
-	TODO: check
+	NOT-FOR-US: Portainer
 CVE-2020-24262
 	RESERVED
 CVE-2020-24261
@@ -70789,7 +70789,7 @@ CVE-2020-11307
 CVE-2020-11306
 	RESERVED
 CVE-2020-11305 (Integer overflow in boot due to improper length check on arguments rec ...)
-	TODO: check
+	NOT-FOR-US: Snapdragon
 CVE-2020-11304
 	RESERVED
 CVE-2020-11303
@@ -70949,7 +70949,7 @@ CVE-2020-11232
 CVE-2020-11231
 	RESERVED
 CVE-2020-11230 (Potential arbitrary memory corruption when the qseecom driver updates  ...)
-	TODO: check
+	NOT-FOR-US: Snapdragon
 CVE-2020-11229
 	RESERVED
 CVE-2020-11228 (Part of RPM region was not protected from xblSec itself due to imprope ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c92f00d3cd0652347839ddb2fa50dd4c5ba141bd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c92f00d3cd0652347839ddb2fa50dd4c5ba141bd
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210317/6a6c7539/attachment.htm>