[Git][security-tracker-team/security-tracker][master] Process some Apple NFUs

Neil Williams (@codehelp) codehelp at debian.org
Fri May 27 11:47:31 BST 2022 


Neil Williams pushed to branch master at Debian Security Tracker / security-tracker


Commits:
97abd286 by Neil Williams at 2022-05-27T11:47:03+01:00
Process some Apple NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -14277,17 +14277,17 @@ CVE-2022-26756 (An out-of-bounds write issue was addressed with improved input v
 CVE-2022-26755 (This issue was addressed with improved environment sanitization. This  ...)
 	TODO: check
 CVE-2022-26754 (A buffer overflow issue was addressed with improved memory handling. T ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26753 (A buffer overflow issue was addressed with improved memory handling. T ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26752 (A buffer overflow issue was addressed with improved memory handling. T ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26751 (A memory corruption issue was addressed with improved input validation ...)
 	TODO: check
 CVE-2022-26750 (A buffer overflow issue was addressed with improved memory handling. T ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26749 (A buffer overflow issue was addressed with improved memory handling. T ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26748 (An out-of-bounds write issue was addressed with improved input validat ...)
 	TODO: check
 CVE-2022-26747 (This issue was addressed with improved checks. This issue is fixed in  ...)
@@ -14301,19 +14301,19 @@ CVE-2022-26744 (A memory corruption issue was addressed with improved state mana
 CVE-2022-26743 (An out-of-bounds write issue was addressed with improved bounds checki ...)
 	TODO: check
 CVE-2022-26742 (A buffer overflow issue was addressed with improved memory handling. T ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26741 (A buffer overflow issue was addressed with improved memory handling. T ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26740 (An out-of-bounds write issue was addressed with improved bounds checki ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26739 (An out-of-bounds write issue was addressed with improved bounds checki ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26738 (An out-of-bounds write issue was addressed with improved bounds checki ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26737 (An out-of-bounds write issue was addressed with improved bounds checki ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26736 (An out-of-bounds write issue was addressed with improved bounds checki ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26735
 	RESERVED
 CVE-2022-26734
@@ -14323,83 +14323,83 @@ CVE-2022-26733
 CVE-2022-26732
 	RESERVED
 CVE-2022-26731 (A logic issue was addressed with improved state management. This issue ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26730
 	RESERVED
 CVE-2022-26729
 	RESERVED
 CVE-2022-26728 (This issue was addressed with improved entitlements. This issue is fix ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26727 (This issue was addressed with improved entitlements. This issue is fix ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26726 (This issue was addressed with improved checks. This issue is fixed in  ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26725 (A logic issue was addressed with improved state management. This issue ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26724 (An authentication issue was addressed with improved state management.  ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26723 (A memory corruption issue was addressed with improved input validation ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26722 (A memory initialization issue was addressed. This issue is fixed in Se ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26721 (A memory initialization issue was addressed. This issue is fixed in Se ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26720 (An out-of-bounds write issue was addressed with improved bounds checki ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26719
 	RESERVED
 CVE-2022-26718 (An out-of-bounds read issue was addressed with improved input validati ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26717
 	RESERVED
 CVE-2022-26716
 	RESERVED
 CVE-2022-26715 (An out-of-bounds write issue was addressed with improved bounds checki ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26714 (A memory corruption issue was addressed with improved validation. This ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26713
 	RESERVED
 CVE-2022-26712 (This issue was addressed by removing the vulnerable code. This issue i ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26711 (An integer overflow issue was addressed with improved input validation ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26710
 	RESERVED
 CVE-2022-26709
 	RESERVED
 CVE-2022-26708 (This issue was addressed with improved checks. This issue is fixed in  ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26707
 	RESERVED
 CVE-2022-26706 (An access issue was addressed with additional sandbox restrictions on  ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26705
 	RESERVED
 CVE-2022-26704 (A validation issue existed in the handling of symlinks and was address ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26703 (An authorization issue was addressed with improved state management. T ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26702 (A use after free issue was addressed with improved memory management.  ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26701 (A race condition was addressed with improved locking. This issue is fi ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26700
 	RESERVED
 CVE-2022-26699
 	RESERVED
 CVE-2022-26698 (An out-of-bounds read issue was addressed with improved bounds checkin ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26697 (An out-of-bounds read issue was addressed with improved input validati ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26696
 	RESERVED
 CVE-2022-26695
 	RESERVED
 CVE-2022-26694 (This issue was addressed with improved checks. This issue is fixed in  ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26693 (This issue was addressed with improved checks. This issue is fixed in  ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26692
 	RESERVED
 CVE-2022-26691 (A logic issue was addressed with improved state management. This issue ...)
@@ -14408,11 +14408,11 @@ CVE-2022-26691 (A logic issue was addressed with improved state management. This
 	NOTE: Fixed by: https://github.com/OpenPrinting/cups/commit/de4f8c196106033e4c372dce3e91b9d42b0b9444 (v2.4.2)
 	NOTE: Followup (fix comment): https://github.com/OpenPrinting/cups/commit/411b6136f450a583ee08c3880fa09dbe837eb3f1
 CVE-2022-26690 (Description: A race condition was addressed with additional validation ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26689
 	RESERVED
 CVE-2022-26688 (An issue in the handling of symlinks was addressed with improved valid ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2022-26687
 	RESERVED
 CVE-2022-26686



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/97abd28632ca8ac50ceebf5a3335b80ac42087e4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/97abd28632ca8ac50ceebf5a3335b80ac42087e4
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220527/6f1e178c/attachment.htm>

More information about the debian-security-tracker-commits mailing list