[Git][security-tracker-team/security-tracker][master] Process two NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sat Nov 11 07:33:12 GMT 2023



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6087b4d1 by Salvatore Bonaccorso at 2023-11-11T08:32:37+01:00
Process two NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -17,7 +17,7 @@ CVE-2023-47164 (Cross-site scripting vulnerability in HOTELDRUID 3.0.5 and earli
 CVE-2023-47129 (Statmic is a core Laravel content management system Composer package.  ...)
 	TODO: check
 CVE-2023-47128 (Piccolo is an object-relational mapping and query builder which suppor ...)
-	TODO: check
+	NOT-FOR-US: Piccolo ORM (not the same as src:piccolo)
 CVE-2023-47121 (Discourse is an open source platform for community discussion. Prior t ...)
 	NOT-FOR-US: Discourse
 CVE-2023-47120 (Discourse is an open source platform for community discussion. In vers ...)
@@ -25,7 +25,7 @@ CVE-2023-47120 (Discourse is an open source platform for community discussion. I
 CVE-2023-47119 (Discourse is an open source platform for community discussion. Prior t ...)
 	NOT-FOR-US: Discourse
 CVE-2023-47108 (OpenTelemetry-Go Contrib is a collection of third-party packages for O ...)
-	TODO: check
+	NOT-FOR-US: OpenTelemetry-Go Contrib
 CVE-2023-46735 (Symfony is a PHP framework for web and console applications and a set  ...)
 	- symfony <not-affected> (Vulnerable code introduced later in v6.3.0)
 	NOTE: https://github.com/symfony/symfony/security/advisories/GHSA-72x2-5c85-6wmr



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6087b4d144f0bfe681dd77d576e9de1cc2ae07b0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6087b4d144f0bfe681dd77d576e9de1cc2ae07b0
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231111/9bd0d786/attachment.htm>


More information about the debian-security-tracker-commits mailing list