[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sun Apr 2 08:58:13 BST 2023



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3c52a5c3 by Salvatore Bonaccorso at 2023-04-02T09:57:44+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
 CVE-2023-1790 (A vulnerability, which was classified as problematic, was found in Sou ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Simple Task Allocation System
 CVE-2023-28938
 	RESERVED
 CVE-2023-28736
@@ -21,7 +21,7 @@ CVE-2023-24592
 CVE-2023-24591
 	RESERVED
 CVE-2023-1789 (Improper Input Validation in GitHub repository firefly-iii/firefly-iii ...)
-	TODO: check
+	NOT-FOR-US: firefly-iii
 CVE-2023-1788
 	RESERVED
 CVE-2023-1787
@@ -29,7 +29,7 @@ CVE-2023-1787
 CVE-2023-1786
 	RESERVED
 CVE-2023-1785 (A vulnerability was found in SourceCodester Earnings and Expense Track ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Earnings and Expense Tracker App
 CVE-2023-1784 (A vulnerability was found in jeecg-boot 3.5.0 and classified as critic ...)
 	TODO: check
 CVE-2023-29149
@@ -291,17 +291,17 @@ CVE-2023-1749
 CVE-2023-1748
 	RESERVED
 CVE-2023-1747 (A vulnerability has been found in IBOS up to 4.5.4 and classified as c ...)
-	TODO: check
+	NOT-FOR-US: IBOS
 CVE-2023-1746 (A vulnerability, which was classified as problematic, was found in Dre ...)
 	NOT-FOR-US: Dreamer CMS
 CVE-2023-1745 (A vulnerability, which was classified as problematic, has been found i ...)
 	NOT-FOR-US: KMPlayer (different from src:kmplayer)
 CVE-2023-1744 (A vulnerability classified as critical was found in IBOS 4.5.5. This v ...)
-	TODO: check
+	NOT-FOR-US: IBOS
 CVE-2023-1743 (A vulnerability classified as problematic has been found in SourceCode ...)
 	NOT-FOR-US: SourceCodester Grade Point Average GPA Calculator
 CVE-2023-1742 (A vulnerability was found in IBOS 4.5.5. It has been rated as critical ...)
-	TODO: check
+	NOT-FOR-US: IBOS
 CVE-2023-29059 (3CX DesktopApp through 18.12.416 has embedded malicious code, as explo ...)
 	NOT-FOR-US: 3CX DesktopApp
 CVE-2023-29058
@@ -916,7 +916,7 @@ CVE-2023-28879 (In Artifex Ghostscript through 10.01.0, there is a buffer overfl
 CVE-2023-28878
 	RESERVED
 CVE-2023-28877 (The VTEX apps-graphql at 2.x GraphQL API module does not properly restric ...)
-	TODO: check
+	NOT-FOR-US: VTEX apps-graphql at 2.x GraphQL API module
 CVE-2023-28876
 	RESERVED
 CVE-2023-28875
@@ -1040,11 +1040,11 @@ CVE-2023-28847
 CVE-2023-28846 (Unpoly is a JavaScript framework for server-side web applications. The ...)
 	TODO: check
 CVE-2023-28845 (Nextcloud talk is a video & audio conferencing app for Nextcloud.  ...)
-	TODO: check
+	NOT-FOR-US: Nextcloud talk is a video & audio conferencing app for Nextcloud
 CVE-2023-28844 (Nextcloud server is an open source home cloud implementation. In affec ...)
 	TODO: check
 CVE-2023-28843 (PrestaShop/paypal is an open source module for the PrestaShop web comm ...)
-	TODO: check
+	NOT-FOR-US: PrestaShop
 CVE-2023-28842
 	RESERVED
 CVE-2023-28841
@@ -1432,9 +1432,9 @@ CVE-2023-28729
 CVE-2023-28728
 	RESERVED
 CVE-2023-28727 (Panasonic AiSEG2 versions 2.00J through 2.93A allows adjacent attacker ...)
-	TODO: check
+	NOT-FOR-US: Panasonic AiSEG2
 CVE-2023-28726 (Panasonic AiSEG2 versions 2.80F through 2.93A allows remote attackers  ...)
-	TODO: check
+	NOT-FOR-US: Panasonic AiSEG2
 CVE-2023-28725 (General Bytes Crypto Application Server (CAS) 20230120, as distributed ...)
 	NOT-FOR-US: General Bytes Crypto Application Server (CAS)
 CVE-2023-28723



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3c52a5c3f7cafb0d0c7975fc99dbbe4782c8ba13

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3c52a5c3f7cafb0d0c7975fc99dbbe4782c8ba13
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230402/b7a26f12/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list