[Git][security-tracker-team/security-tracker][master] golang-github-endophage-gotuf removed & two NFUs

[Neil Williams (@codehelp)]

Neil Williams pushed to branch master at Debian Security Tracker / security-tracker


Commits:
193d5ad6 by Neil Williams at 2022-05-09T13:22:41+01:00
golang-github-endophage-gotuf removed & two NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3639,9 +3639,13 @@ CVE-2022-29175 (Vyper is a pythonic smart contract language for the ethereum vir
 CVE-2022-29174
 	RESERVED
 CVE-2022-29173 (go-tuf is a Go implementation of The Update Framework (TUF). go-tuf do ...)
-	TODO: check
+	- golang-github-endophage-gotuf <removed>
+	[stretch] - golang-github-endophage-gotuf <not-affected> (Vulnerable code not present)
+	NOTE: upstream location has changed since the version in stretch.
+	NOTE: https://github.com/theupdateframework/go-tuf/commit/ed6788e710fc3093a7ecc2d078bf734c0f200d8d
+	NOTE: https://github.com/theupdateframework/go-tuf/security/advisories/GHSA-66x3-6cw3-v5gj
 CVE-2022-29172 (Auth0 is an authentication broker that supports both social and enterp ...)
-	TODO: check
+	NOT-FOR-US: Auth0
 CVE-2022-29171 (Sourcegraph is a fast and featureful code search and navigation engine ...)
 	NOT-FOR-US: Sourcegraph
 CVE-2022-29170
@@ -3653,7 +3657,7 @@ CVE-2022-29168
 CVE-2022-29167 (Hawk is an HTTP authentication scheme providing mechanisms for making  ...)
 	NOT-FOR-US: Hawk (mozilla/hawk, different from itp'ed hawk, #634344)
 CVE-2022-29166 (matrix-appservice-irc is a Node.js IRC bridge for Matrix. The vulnerab ...)
-	TODO: check
+	NOT-FOR-US: Matrix-appservice-bridge
 CVE-2022-29165
 	RESERVED
 CVE-2022-29164 (Argo Workflows is an open source container-native workflow engine for  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/193d5ad681ba5fe580d609f4b9be98fdbaaf9aa1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/193d5ad681ba5fe580d609f4b9be98fdbaaf9aa1
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220509/f655fb71/attachment-0001.htm>