[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8914180a by Salvatore Bonaccorso at 2022-08-05T10:24:12+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
 CVE-2022-37431 (A Reflected Cross-site scripting (XSS) issue was discovered in dotCMS  ...)
-	TODO: check
+	NOT-FOR-US: dotCMS
 CVE-2022-37430
 	RESERVED
 CVE-2022-37429
@@ -31,7 +31,7 @@ CVE-2022-37417
 CVE-2022-37416 (Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory  ...)
 	TODO: check
 CVE-2022-37415 (The Uniwill SparkIO.sys driver 1.0 is vulnerable to a stack-based buff ...)
-	TODO: check
+	NOT-FOR-US: Uniwill SparkIO.sys driver
 CVE-2022-37414
 	RESERVED
 CVE-2022-37413
@@ -2960,7 +2960,7 @@ CVE-2022-35245 (In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.
 CVE-2022-35243 (In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.5.1, 14.1. ...)
 	NOT-FOR-US: F5 BIG-IP
 CVE-2022-35241 (In versions 2.x before 2.3.1 and all versions of 1.x, when NGINX Insta ...)
-	TODO: check
+	NOT-FOR-US: F5
 CVE-2022-35240 (In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, and ...)
 	NOT-FOR-US: F5 BIG-IP
 CVE-2022-35236 (In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, and ...)
@@ -2990,7 +2990,7 @@ CVE-2022-32455 (In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.
 CVE-2022-31473 (In BIG-IP Versions 16.1.x before 16.1.1 and 15.1.x before 15.1.4, when ...)
 	NOT-FOR-US: F5 BIG-IP
 CVE-2022-30535 (In versions 2.x before 2.3.0 and all versions of 1.x, An attacker auth ...)
-	TODO: check
+	NOT-FOR-US: F5
 CVE-2022-2466
 	RESERVED
 CVE-2022-2465
@@ -5972,7 +5972,7 @@ CVE-2022-34995
 CVE-2022-34994
 	RESERVED
 CVE-2022-34993 (Totolink A3600R_Firmware V4.1.2cu.5182_B20201102 contains a hard code  ...)
-	TODO: check
+	NOT-FOR-US: Totolink
 CVE-2022-34992 (Luadec v0.9.9 was discovered to contain a heap-buffer overflow via the ...)
 	TODO: check
 CVE-2022-34991 (Paymoney v3.3 was discovered to contain multiple reflected cross-site  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8914180a4117e99a069164219e8c6fb72cd1266f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8914180a4117e99a069164219e8c6fb72cd1266f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220805/24d94c4e/attachment.htm>