[Git][security-tracker-team/security-tracker][master] 2 commits: Remove notes from CVE-2021-39617

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sat Mar 4 09:00:32 GMT 2023



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0b661feb by Salvatore Bonaccorso at 2023-03-04T09:59:01+01:00
Remove notes from CVE-2021-39617

Got rejected as further investigation showed it was no security issue.

- - - - -
4b2c4a07 by Salvatore Bonaccorso at 2023-03-04T09:59:34+01:00
Drop notes from CVE-2018-3614

It was rejected earlier due not beeing finally used by a CNA in 2018
with publishing. Cleanup was incomplete, remove the remaining notes.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -117007,7 +117007,6 @@ CVE-2021-39618 (In multiple methods of EuiccNotificationManager.java, there is a
 	NOT-FOR-US: Android
 CVE-2021-39617
 	REJECTED
-	NOT-FOR-US: Android
 CVE-2021-39616 (Summary:Product: AndroidVersions: Android SoCAndroid ID: A-204686438 ...)
 	NOT-FOR-US: Android
 CVE-2021-3733 (There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker ...)
@@ -349943,8 +349942,6 @@ CVE-2018-3615 (Systems with microprocessors utilizing speculative execution and
 	NOTE: most server type CPUs, additional models were supported in the 3.20180807a.1 release
 CVE-2018-3614
 	REJECTED
-	NOTE: https://bugzilla.tianocore.org/show_bug.cgi?id=751
-	NOTE: https://edk2-docs.gitbooks.io/security-advisory/content/untested-memory-not-covered-by-smm-page-protection.html
 CVE-2018-3613 (Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2 ...)
 	NOTE: https://bugzilla.tianocore.org/show_bug.cgi?id=415
 	NOTE: https://bugzilla.tianocore.org/attachment.cgi?id=44



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/cd396fdc918d6e34b3f3d494ad8d6ed54a3f51ca...4b2c4a0790f2a21e84e07347fd703dd4b2740c9e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/cd396fdc918d6e34b3f3d494ad8d6ed54a3f51ca...4b2c4a0790f2a21e84e07347fd703dd4b2740c9e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230304/95aff4c7/attachment.htm>


More information about the debian-security-tracker-commits mailing list