[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Mon Sep 19 19:53:58 BST 2022



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fb002b03 by Salvatore Bonaccorso at 2022-09-19T20:53:23+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -349,7 +349,7 @@ CVE-2022-40780
 CVE-2022-40779
 	RESERVED
 CVE-2022-40778 (A stored Cross-Site Scripting (XSS) vulnerability in OPSWAT MetaDefend ...)
-	TODO: check
+	NOT-FOR-US: OPSWAT MetaDefender ICAP Server
 CVE-2022-40777
 	RESERVED
 CVE-2022-40776
@@ -367,7 +367,7 @@ CVE-2022-40771
 CVE-2022-40770
 	RESERVED
 CVE-2022-40769 (profanity through 1.60 has only four billion possible RNG initializati ...)
-	TODO: check
+	NOT-FOR-US: profanity (not same as src:profanity)
 CVE-2022-40768 (drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local us ...)
 	- linux <unfixed>
 	NOTE: https://www.openwall.com/lists/oss-security/2022/09/09/1
@@ -457,7 +457,7 @@ CVE-2022-3227
 CVE-2022-3226
 	RESERVED
 CVE-2022-3225 (Improper Access Control in GitHub repository budibase/budibase prior t ...)
-	TODO: check
+	NOT-FOR-US: budibase
 CVE-2022-3224 (Misinterpretation of Input in GitHub repository ionicabizau/parse-url  ...)
 	NOT-FOR-US: Node parse-url
 CVE-2022-3223 (Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fb002b03a3cf3036c51d947979acfd3f568d3284

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fb002b03a3cf3036c51d947979acfd3f568d3284
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220919/752525b1/attachment.htm>


More information about the debian-security-tracker-commits mailing list