[Git][security-tracker-team/security-tracker][master] Apache NFUs

Moritz Muehlenhoff (@jmm) jmm at debian.org
Tue Jul 19 10:55:31 BST 2022



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c8f091ca by Moritz Muehlenhoff at 2022-07-19T11:55:09+02:00
Apache NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -365,7 +365,7 @@ CVE-2022-2455
 CVE-2022-36128
 	RESERVED
 CVE-2022-36127 (A vulnerability in Apache SkyWalking NodeJS Agent prior to 0.5.1. The  ...)
-	TODO: check
+	NOT-FOR-US: Apache SkyWalking
 CVE-2022-2454
 	RESERVED
 CVE-2022-2453
@@ -1273,7 +1273,7 @@ CVE-2022-2400 (External Control of File Name or Path in GitHub repository dompdf
 CVE-2022-2399
 	RESERVED
 CVE-2022-35741 (Apache CloudStack version 4.5.0 and later has a SAML 2.0 authenticatio ...)
-	TODO: check
+	NOT-FOR-US: Apache CloudStack
 CVE-2022-2398
 	RESERVED
 CVE-2022-2397
@@ -6152,7 +6152,7 @@ CVE-2022-33903 (Tor 0.4.7.x before 0.4.7.8 allows a denial of service via the we
 	NOTE: https://lists.torproject.org/pipermail/tor-announce/2022-June/000242.html
 	NOTE: https://github.com/torproject/tor/commit/b0496d40197dd5b4fb7b694c1410082d4e34dda6 (tor-0.4.7.8)
 CVE-2022-33891 (The Apache Spark UI offers the possibility to enable ACLs via the conf ...)
-	TODO: check
+	- apache-spark <itp> (bug #802194)
 CVE-2022-33890
 	RESERVED
 CVE-2022-33889



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c8f091ca5ffea8e4b583d3cc57a974beb40d6b6d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c8f091ca5ffea8e4b583d3cc57a974beb40d6b6d
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220719/a0d304e5/attachment.htm>


More information about the debian-security-tracker-commits mailing list