[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fd524306 by Moritz Muehlenhoff at 2023-07-14T23:56:26+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,13 +1,13 @@
 CVE-2023-3673 (SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.24.)
 	NOT-FOR-US: pimcore
 CVE-2023-3672 (Cross-site Scripting (XSS) - DOM in GitHub repository plaidweb/webment ...)
-	TODO: check
+	NOT-FOR-US: plaidweb/webmention.js
 CVE-2023-3633 (An out-of-bounds writevulnerability in Bitdefender Engines on Windows  ...)
 	NOT-FOR-US: Bitdefender
 CVE-2023-3434 (Improper Input Validation in the hyperlink interpretation inSavoir-fai ...)
-	TODO: check
+	NOT-FOR-US: Savoir-faire Linux's Jami
 CVE-2023-3433 (The "nickname" field within Savoir-faire Linux's Jami application is s ...)
-	TODO: check
+	NOT-FOR-US: Savoir-faire Linux's Jami
 CVE-2023-38325 (The cryptography package before 41.0.2 for Python mishandles SSH certi ...)
 	- python-cryptography <not-affected> (Vulnerable code not present)
 	NOTE: https://github.com/pyca/cryptography/issues/9207
@@ -22,9 +22,9 @@ CVE-2023-38252 (An out-of-bounds read flaw was found in w3m, in the Strnew_size
 	- w3m <unfixed>
 	NOTE: https://github.com/tats/w3m/issues/270
 CVE-2023-37474 (Copyparty is a portable file server. Versions prior to 1.8.2 are subje ...)
-	TODO: check
+	NOT-FOR-US: copyparty
 CVE-2023-37473 (zenstruck/collections is a set of helpers for iterating/paginating/fil ...)
-	TODO: check
+	NOT-FOR-US: zenstruck/collections
 CVE-2023-37224 (An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6. ...)
 	NOT-FOR-US: Archer
 CVE-2023-37223 (Cross Site Scripting (XSS) vulnerability in Archer Platform before v.6 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fd524306095eeeddaad2217dd5651180f8872bfe

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fd524306095eeeddaad2217dd5651180f8872bfe
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230714/2c526dbe/attachment.htm>