[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Jun 17 10:04:39 BST 2022



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d9620279 by Salvatore Bonaccorso at 2022-06-17T11:04:05+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,7 +1,7 @@
 CVE-2022-33916
 	RESERVED
 CVE-2022-33915 (Versions of the Amazon AWS Apache Log4j hotpatch package before log4j- ...)
-	TODO: check
+	NOT-FOR-US: Specific to Amazon AWS Apache Log4j hotpatch package
 CVE-2022-33914
 	RESERVED
 CVE-2022-33913
@@ -367,19 +367,19 @@ CVE-2022-33758
 CVE-2022-33757
 	RESERVED
 CVE-2022-33756 (CA Automic Automation 12.2 and 12.3 contain an entropy weakness vulner ...)
-	TODO: check
+	NOT-FOR-US: CA Automic Automation
 CVE-2022-33755 (CA Automic Automation 12.2 and 12.3 contain an insecure input handling ...)
-	TODO: check
+	NOT-FOR-US: CA Automic Automation
 CVE-2022-33754 (CA Automic Automation 12.2 and 12.3 contain an insufficient input vali ...)
-	TODO: check
+	NOT-FOR-US: CA Automic Automation
 CVE-2022-33753 (CA Automic Automation 12.2 and 12.3 contain an insecure file creation  ...)
-	TODO: check
+	NOT-FOR-US: CA Automic Automation
 CVE-2022-33752 (CA Automic Automation 12.2 and 12.3 contain an insufficient input vali ...)
-	TODO: check
+	NOT-FOR-US: CA Automic Automation
 CVE-2022-33751 (CA Automic Automation 12.2 and 12.3 contain an insecure memory handlin ...)
-	TODO: check
+	NOT-FOR-US: CA Automic Automation
 CVE-2022-33750 (CA Automic Automation 12.2 and 12.3 contain an authentication error vu ...)
-	TODO: check
+	NOT-FOR-US: CA Automic Automation
 CVE-2022-33749
 	RESERVED
 CVE-2022-33748
@@ -401,7 +401,7 @@ CVE-2022-33741
 CVE-2022-33740
 	RESERVED
 CVE-2022-33739 (CA Clarity 15.8 and below and 15.9.0 contain an insecure XML parsing v ...)
-	TODO: check
+	NOT-FOR-US: CA Clarity
 CVE-2022-33738
 	RESERVED
 CVE-2022-33737
@@ -1983,7 +1983,7 @@ CVE-2022-2060 (Cross-site Scripting (XSS) - Stored in GitHub repository dolibarr
 CVE-2022-2059
 	RESERVED
 CVE-2021-46820 (Arbitrary File Deletion vulnerability in XOS-Shop xos_shop_system 1.0. ...)
-	TODO: check
+	NOT-FOR-US: XOS-Shop
 CVE-2020-36546
 	RESERVED
 CVE-2020-36545



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d9620279e29f3e2858b238e9347eedcf48ba36bd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d9620279e29f3e2858b238e9347eedcf48ba36bd
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220617/8161d0c9/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list