[Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Mon Sep 19 19:53:58 BST 2022
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
fb002b03 by Salvatore Bonaccorso at 2022-09-19T20:53:23+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -349,7 +349,7 @@ CVE-2022-40780
CVE-2022-40779
RESERVED
CVE-2022-40778 (A stored Cross-Site Scripting (XSS) vulnerability in OPSWAT MetaDefend ...)
- TODO: check
+ NOT-FOR-US: OPSWAT MetaDefender ICAP Server
CVE-2022-40777
RESERVED
CVE-2022-40776
@@ -367,7 +367,7 @@ CVE-2022-40771
CVE-2022-40770
RESERVED
CVE-2022-40769 (profanity through 1.60 has only four billion possible RNG initializati ...)
- TODO: check
+ NOT-FOR-US: profanity (not same as src:profanity)
CVE-2022-40768 (drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local us ...)
- linux <unfixed>
NOTE: https://www.openwall.com/lists/oss-security/2022/09/09/1
@@ -457,7 +457,7 @@ CVE-2022-3227
CVE-2022-3226
RESERVED
CVE-2022-3225 (Improper Access Control in GitHub repository budibase/budibase prior t ...)
- TODO: check
+ NOT-FOR-US: budibase
CVE-2022-3224 (Misinterpretation of Input in GitHub repository ionicabizau/parse-url ...)
NOT-FOR-US: Node parse-url
CVE-2022-3223 (Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fb002b03a3cf3036c51d947979acfd3f568d3284
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fb002b03a3cf3036c51d947979acfd3f568d3284
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220919/752525b1/attachment.htm>
More information about the debian-security-tracker-commits
mailing list