[Git][security-tracker-team/security-tracker][master] Process two NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
edd19b68 by Salvatore Bonaccorso at 2022-06-29T21:31:56+02:00
Process two NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -54377,7 +54377,7 @@ CVE-2021-41462 (Cross-site scripting (XSS) vulnerability in concrete/elements/co
 CVE-2021-41461 (Cross-site scripting (XSS) vulnerability in concrete/elements/collecti ...)
 	NOT-FOR-US: concrete5-legacy
 CVE-2021-41460 (ECShop 4.1.0 has SQL injection vulnerability, which can be exploited b ...)
-	TODO: check
+	NOT-FOR-US: ECShop
 CVE-2021-41459 (There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmx_n ...)
 	- gpac 2.0.0+dfsg1-2
 	[buster] - gpac <not-affected> (Vulnerable code not present)
@@ -55694,7 +55694,7 @@ CVE-2021-40945
 CVE-2021-40944 (In GPAC MP4Box 1.1.0, there is a Null pointer reference in the functio ...)
 	TODO: check
 CVE-2021-40943 (In Bento4 1.6.0-638, there is a null pointer reference in the function ...)
-	TODO: check
+	NOT-FOR-US: Bento4
 CVE-2021-40942 (In GPAC MP4Box v1.1.0, there is a heap-buffer-overflow in the function ...)
 	- gpac 2.0.0+dfsg1-2
 	NOTE: https://github.com/gpac/gpac/issues/1908



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/edd19b684351e015445570b68963f7a1d1c962a5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/edd19b684351e015445570b68963f7a1d1c962a5
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220629/24c6d9a0/attachment.htm>