[Git][security-tracker-team/security-tracker][master] Process some NFUs

Neil Williams (@codehelp) codehelp at debian.org
Thu Apr 21 10:19:12 BST 2022



Neil Williams pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3fbb4bbb by Neil Williams at 2022-04-21T10:18:44+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -12855,7 +12855,7 @@ CVE-2022-24847 (GeoServer is an open source software server written in Java that
 CVE-2022-24846 (GeoWebCache is a tile caching server implemented in Java. The GeoWebCa ...)
 	TODO: check
 CVE-2022-24845 (Vyper is a pythonic Smart Contract Language for the ethereum virtual m ...)
-	TODO: check
+	NOT-FOR-US: Vyper
 CVE-2022-24844 (Gin-vue-admin is a backstage management system based on vue and gin, w ...)
 	NOT-FOR-US: Gin-vue-admin
 CVE-2022-24843 (Gin-vue-admin is a backstage management system based on vue and gin, w ...)
@@ -12863,7 +12863,7 @@ CVE-2022-24843 (Gin-vue-admin is a backstage management system based on vue and
 CVE-2022-24842 (MinIO is a High Performance Object Storage released under GNU Affero G ...)
 	NOT-FOR-US: MinIO
 CVE-2022-24841 (fleetdm/fleet is an open source device management, built on osquery. A ...)
-	TODO: check
+	NOT-FOR-US: Fleet
 CVE-2022-24840
 	RESERVED
 CVE-2022-24839 (org.cyberneko.html is an html parser written in Java. The fork of `org ...)
@@ -12873,7 +12873,7 @@ CVE-2022-24839 (org.cyberneko.html is an html parser written in Java. The fork o
 	NOTE: https://github.com/sparklemotion/nekohtml/security/advisories/GHSA-9849-p7jc-9rmv
 	NOTE: https://github.com/sparklemotion/nekohtml/commit/a800fce3b079def130ed42a408ff1d09f89e773d
 CVE-2022-24838 (Nextcloud Calendar is a calendar application for the nextcloud framewo ...)
-	TODO: check
+	NOT-FOR-US: Nextcloud Calendar
 CVE-2022-24837 (HedgeDoc is an open-source, web-based, self-hosted, collaborative mark ...)
 	NOT-FOR-US: HedgeDoc
 CVE-2022-24836 (Nokogiri is an open source XML and HTML library for Ruby. Nokogiri `&l ...)
@@ -12885,7 +12885,7 @@ CVE-2022-24835
 CVE-2022-24834
 	RESERVED
 CVE-2022-24833 (PrivateBin is minimalist, open source online pastebin clone where the  ...)
-	TODO: check
+	NOT-FOR-US: PrivateBin
 CVE-2022-24832 (GoCD is an open source a continuous delivery server. The bundled gocd- ...)
 	NOT-FOR-US: GoCD
 CVE-2022-24831
@@ -12893,7 +12893,7 @@ CVE-2022-24831
 CVE-2022-24830
 	RESERVED
 CVE-2022-24829 (Garden is an automation platform for Kubernetes development and testin ...)
-	TODO: check
+	NOT-FOR-US: Garden
 CVE-2022-24828 (Composer is a dependency manager for the PHP programming language. Int ...)
 	- composer <unfixed> (bug #1009960)
 	NOTE: https://github.com/composer/composer/commit/2c40c53637c5c7e43fff7c09d3d324d632734709 (2.2.12)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3fbb4bbba45e54cb45959e20f54abf9325482723

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3fbb4bbba45e54cb45959e20f54abf9325482723
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220421/08a9cf0c/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list