[Git][security-tracker-team/security-tracker][master] Process some NFUs & reviewboard ITP

Neil Williams (@codehelp) codehelp at debian.org
Thu May 12 11:19:38 BST 2022



Neil Williams pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c793fac0 by Neil Williams at 2022-05-12T11:19:10+01:00
Process some NFUs & reviewboard ITP

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -62634,11 +62634,11 @@ CVE-2021-33319
 CVE-2021-33318
 	RESERVED
 CVE-2021-33317 (The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suf ...)
-	TODO: check
+	NOT-FOR-US: TRENDnet
 CVE-2021-33316 (The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suf ...)
-	TODO: check
+	NOT-FOR-US: TRENDnet
 CVE-2021-33315 (The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suf ...)
-	TODO: check
+	NOT-FOR-US: TRENDnet
 CVE-2021-33314
 	RESERVED
 CVE-2021-33313
@@ -67991,7 +67991,7 @@ CVE-2021-31332
 CVE-2021-31331
 	RESERVED
 CVE-2021-31330 (A Cross-Site Scripting (XSS) vulnerability exists within Review Board  ...)
-	TODO: check
+	- reviewboard <itp> (bug #653113)
 CVE-2021-31329 (Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Chat" and "P ...)
 	NOT-FOR-US: Remote Clinic
 CVE-2021-31328
@@ -70687,7 +70687,7 @@ CVE-2021-30363
 CVE-2021-30362
 	RESERVED
 CVE-2021-30361 (The Check Point Gaia Portal's GUI Clients allowed authenticated admini ...)
-	TODO: check
+	NOT-FOR-US: Check Point
 CVE-2021-30360 (Users have access to the directory where the installation repair occur ...)
 	NOT-FOR-US: Check Point
 CVE-2021-30359 (The Harmony Browse and the SandBlast Agent for Browsers installers mus ...)
@@ -75920,7 +75920,7 @@ CVE-2021-28292
 CVE-2021-28291
 	RESERVED
 CVE-2021-28290 (A cross-site scripting (XSS) vulnerability in Skoruba IdentityServer4. ...)
-	TODO: check
+	NOT-FOR-US: IdentityServer
 CVE-2021-28289
 	RESERVED
 CVE-2021-28288
@@ -82012,7 +82012,7 @@ CVE-2021-3256 (KuaiFanCMS V5.x contains an arbitrary file read vulnerability in
 CVE-2021-3255
 	RESERVED
 CVE-2021-3254 (Asus DSL-N14U-B1 1.1.2.3_805 allows remote attackers to cause a Denial ...)
-	TODO: check
+	NOT-FOR-US: Asus DSL-N14U-B1
 CVE-2021-3253
 	RESERVED
 CVE-2021-3252 (KACO New Energy XP100U Up to XP-JAVA 2.0 is affected by incorrect acce ...)
@@ -128420,7 +128420,7 @@ CVE-2020-19230
 CVE-2020-19229 (Jeesite 1.2.7 uses the apache shiro version 1.2.3 affected by CVE-2016 ...)
 	NOT-FOR-US: Jeesite
 CVE-2020-19228 (An issue was found in bludit v3.13.0, unsafe implementation of the bac ...)
-	TODO: check
+	NOT-FOR-US: bludit
 CVE-2020-19227
 	RESERVED
 CVE-2020-19226



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c793fac0779f6f6345aaec8cda939d8f7183b2a9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c793fac0779f6f6345aaec8cda939d8f7183b2a9
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220512/79e46b19/attachment.htm>


More information about the debian-security-tracker-commits mailing list