[Git][security-tracker-team/security-tracker][master] 2 commits: Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5634b802 by Salvatore Bonaccorso at 2022-01-09T09:25:42+01:00
Process some NFUs

- - - - -
6f88f15f by Salvatore Bonaccorso at 2022-01-09T09:33:07+01:00
Add CVE-2022-22846/python-dnslib

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3,7 +3,8 @@ CVE-2022-22848
 CVE-2022-22847
 	RESERVED
 CVE-2022-22846 (The dnslib package through 0.9.16 for Python does not verify that the  ...)
-	TODO: check
+	- python-dnslib <unfixed>
+	NOTE: https://github.com/paulc/dnslib/issues/30
 CVE-2022-22845
 	RESERVED
 CVE-2022-22844 (LibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in tif_unix.c i ...)
@@ -41,11 +42,11 @@ CVE-2022-22829
 CVE-2022-22828
 	RESERVED
 CVE-2021-46166 (Zoho ManageEngine Desktop Central before 10.0.662 allows authenticated ...)
-	TODO: check
+	NOT-FOR-US: Zoho ManageEngine
 CVE-2021-46165 (Zoho ManageEngine Desktop Central before 10.0.662, during startup, lau ...)
-	TODO: check
+	NOT-FOR-US: Zoho ManageEngine
 CVE-2021-46164 (Zoho ManageEngine Desktop Central before 10.0.662 allows remote code e ...)
-	TODO: check
+	NOT-FOR-US: Zoho ManageEngine
 CVE-2021-46163
 	RESERVED
 CVE-2022-0156
@@ -2000,7 +2001,7 @@ CVE-2022-22291
 CVE-2022-22290
 	RESERVED
 CVE-2022-22289 (Improper access control vulnerability in S Assistant prior to version  ...)
-	TODO: check
+	NOT-FOR-US: Samsung
 CVE-2022-22288 (Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 ...)
 	NOT-FOR-US: Samsung
 CVE-2022-22287 (Abitrary file access vulnerability in Samsung Email prior to 6.1.60.16 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/5190fd68ecf881198f018f9df7929f28b20fbbf4...6f88f15f9285ffba621808e1961d54a217500b0b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/5190fd68ecf881198f018f9df7929f28b20fbbf4...6f88f15f9285ffba621808e1961d54a217500b0b
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220109/622d0c1a/attachment.htm>