[Git][security-tracker-team/security-tracker][master] Process several new NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Jan 26 08:29:13 GMT 2022 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
07336b31 by Salvatore Bonaccorso at 2022-01-26T09:28:47+01:00
Process several new NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2637,7 +2637,7 @@ CVE-2022-0212
 CVE-2022-0211
 	RESERVED
 CVE-2021-45729 (The Privilege Escalation vulnerability discovered in the WP Google Map ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2021-44779
 	RESERVED
 CVE-2021-44777 (Cross-Site Request Forgery (CSRF) vulnerabilities leading to single or ...)
@@ -3129,53 +3129,53 @@ CVE-2022-23033 (arm: guest_physmap_remove_page not removing the p2m mappings The
 	[stretch] - xen <not-affected> (Vulnerable code introduced later)
 	NOTE: https://xenbits.xen.org/xsa/advisory-393.html
 CVE-2022-23032 (In all versions before 7.2.1.4, when proxy settings are configured in  ...)
-	TODO: check
+	NOT-FOR-US: F5 BIG-IP
 CVE-2022-23031 (On BIG-IP FPS, ASM, and Advanced WAF versions 16.1.x before 16.1.1, 15 ...)
-	TODO: check
+	NOT-FOR-US: F5 BIG-IP
 CVE-2022-23030 (On version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before ...)
-	TODO: check
+	NOT-FOR-US: F5 BIG-IP
 CVE-2022-23029 (On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x b ...)
-	TODO: check
+	NOT-FOR-US: F5 BIG-IP
 CVE-2022-23028 (On BIG-IP AFM version 16.x before 16.1.0, 15.1.x before 15.1.5, 14.1.x ...)
-	TODO: check
+	NOT-FOR-US: F5 BIG-IP
 CVE-2022-23027 (On BIG-IP versions 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, 13.1. ...)
-	TODO: check
+	NOT-FOR-US: F5 BIG-IP
 CVE-2022-23026 (On BIG-IP ASM & Advanced WAF version 16.1.x before 16.1.2, 15.1.x  ...)
-	TODO: check
+	NOT-FOR-US: F5 BIG-IP
 CVE-2022-23025 (On BIG-IP version 16.1.x before 16.1.1, 15.1.x before 15.1.4, 14.1.x b ...)
-	TODO: check
+	NOT-FOR-US: F5 BIG-IP
 CVE-2022-23024 (On BIG-IP AFM version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1 ...)
-	TODO: check
+	NOT-FOR-US: F5 BIG-IP
 CVE-2022-23023 (On BIG-IP version 16.1.x before 16.1.2.1, 15.1.x before 15.1.5, 14.1.x ...)
-	TODO: check
+	NOT-FOR-US: F5 BIG-IP
 CVE-2022-23022 (On BIG-IP version 16.1.x before 16.1.2, when an HTTP profile is config ...)
-	TODO: check
+	NOT-FOR-US: F5 BIG-IP
 CVE-2022-23021 (On BIG-IP version 16.1.x before 16.1.2, when any of the following conf ...)
-	TODO: check
+	NOT-FOR-US: F5 BIG-IP
 CVE-2022-23020 (On BIG-IP version 16.1.x before 16.1.2, when the 'Respond on Error' se ...)
-	TODO: check
+	NOT-FOR-US: F5 BIG-IP
 CVE-2022-23019 (On BIG-IP version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x ...)
-	TODO: check
+	NOT-FOR-US: F5 BIG-IP
 CVE-2022-23018 (On BIG-IP AFM version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14 ...)
-	TODO: check
+	NOT-FOR-US: F5 BIG-IP
 CVE-2022-23017 (On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x b ...)
-	TODO: check
+	NOT-FOR-US: F5 BIG-IP
 CVE-2022-23016 (On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG- ...)
 	TODO: check
 CVE-2022-23015 (On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, and 14. ...)
-	TODO: check
+	NOT-FOR-US: F5 BIG-IP
 CVE-2022-23014 (On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG- ...)
 	TODO: check
 CVE-2022-23013 (On BIG-IP DNS & GTM version 16.x before 16.1.0, 15.1.x before 15.1 ...)
-	TODO: check
+	NOT-FOR-US: F5 BIG-IP
 CVE-2022-23012 (On BIG-IP versions 15.1.x before 15.1.4.1 and 14.1.x before 14.1.4.5,  ...)
-	TODO: check
+	NOT-FOR-US: F5 BIG-IP
 CVE-2022-23011 (On certain hardware BIG-IP platforms, in version 15.1.x before 15.1.4  ...)
-	TODO: check
+	NOT-FOR-US: F5 BIG-IP
 CVE-2022-23010 (On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x  ...)
-	TODO: check
+	NOT-FOR-US: F5 BIG-IP
 CVE-2022-23009 (On BIG-IQ Centralized Management 8.x before 8.1.0, an authenticated ad ...)
-	TODO: check
+	NOT-FOR-US: F5 BIG-IP
 CVE-2022-23008 (On NGINX Controller API Management versions 3.18.0-3.19.0, an authenti ...)
 	TODO: check
 CVE-2022-23007
@@ -30351,7 +30351,7 @@ CVE-2021-38131
 CVE-2021-38130
 	RESERVED
 CVE-2021-38129 (Escalation of privileges vulnerability in Micro Focus in Micro Focus O ...)
-	TODO: check
+	NOT-FOR-US: Micro Focus
 CVE-2021-38128
 	RESERVED
 CVE-2021-38127 (Potential vulnerabilities have been identified in Micro Focus ArcSight ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/07336b312e3c47ed605da2bfdcc97a9d7722c454

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/07336b312e3c47ed605da2bfdcc97a9d7722c454
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220126/a2738b5f/attachment.htm>

More information about the debian-security-tracker-commits mailing list