[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f1d63fb2 by Moritz Muehlenhoff at 2023-09-20T08:48:01+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -21,15 +21,15 @@ CVE-2023-42451 (Mastodon is a free, open-source social network server based on A
 CVE-2023-42450 (Mastodon is a free, open-source social network server based on Activit ...)
 	- mastodon <itp> (bug #859741)
 CVE-2023-42447 (blurhash-rs is a pure Rust implementation of Blurhash, software for en ...)
-	TODO: check
+	NOT-FOR-US: Rust crate blurhash
 CVE-2023-42444 (phonenumber is a library for parsing, formatting and validating intern ...)
-	TODO: check
+	NOT-FOR-US: Rust crate phonenumber
 CVE-2023-41890 (Sustainsys.Saml2 library adds SAML2P support to ASP.NET web sites, all ...)
-	TODO: check
+	NOT-FOR-US: Sustainsys.Saml2
 CVE-2023-41834 (Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Fl ...)
-	TODO: check
+	NOT-FOR-US: Apache Flink
 CVE-2023-41387 (A SQL injection in the flutter_downloader component through 1.11.1 for ...)
-	TODO: check
+	NOT-FOR-US: flutter_downloader
 CVE-2023-41179 (A vulnerability in the 3rd party AV uninstaller module contained in Tr ...)
 	NOT-FOR-US: Trend Micro
 CVE-2023-3892 (Improper Restriction of XML External Entity Reference vulnerability in ...)
@@ -53,13 +53,13 @@ CVE-2023-32186 (A Allocation of Resources Without Limits or Throttling vulnerabi
 CVE-2023-32182 (A Improper Link Resolution Before File Access ('Link Following') vulne ...)
 	TODO: check
 CVE-2023-31808 (Technicolor TG670 10.5.N.9 devices contain multiple accounts with hard ...)
-	TODO: check
+	NOT-FOR-US: Technicolor
 CVE-2023-2995 (The Leyka WordPress plugin through 3.30.3 does not sanitise and escape ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-2567 (A SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due ...)
-	TODO: check
+	NOT-FOR-US: Nozomi Networks Guardian and CMC
 CVE-2023-29245 (A SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due ...)
-	TODO: check
+	NOT-FOR-US: Nozomi Networks Guardian and CMC
 CVE-2023-4998
 	- gitlab <unfixed>
 CVE-2023-5060 (Cross-site Scripting (XSS) - DOM in GitHub repository librenms/librenm ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f1d63fb280256cde637ef56430ae68f84f4d1c55

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f1d63fb280256cde637ef56430ae68f84f4d1c55
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230920/9e10bf06/attachment.htm>