[Git][security-tracker-team/security-tracker][master] Add explanations on not-affected

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
71ea72ad by Salvatore Bonaccorso at 2024-08-24T09:49:04+02:00
Add explanations on not-affected

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -121488,7 +121488,7 @@ CVE-2022-4900 (A vulnerability was found in PHP where setting the environment va
 	- php8.2 <not-affected> (Fixed before initial upload)
 	- php7.4 <removed>
 	[bullseye] - php7.4 <postponed> (Minor issue, fix along in future update)
-	- php7.3 <not-affected>
+	- php7.3 <not-affected> (Vulnerable code not present)
 	NOTE: https://github.com/php/php-src/issues/8989
 	NOTE: https://github.com/php/php-src/pull/9000
 	NOTE: https://github.com/php/php-src/commit/789a37f14405e2d1a05a76c9fb4ed2d49d4580d5 (php-8.0.22RC1)
@@ -193412,11 +193412,10 @@ CVE-2022-27386 (MariaDB Server v10.7 and below was discovered to contain a segme
 	- mariadb-10.5 <removed>
 	[bullseye] - mariadb-10.5 1:10.5.18-0+deb11u1
 	- mariadb-10.3 <removed>
-	- mariadb-10.1 <not-affected>
+	- mariadb-10.1 <not-affected> (POC does not coredump and warn about not supported default column)
 	NOTE: MariaDB bug: https://jira.mariadb.org/browse/MDEV-26406
 	NOTE: MariaDB main bug: https://jira.mariadb.org/browse/MDEV-21028
 	NOTE: MariaDB commit: https://github.com/MariaDB/server/commit/5ba77222e9fe7af8ff403816b5338b18b342053c (mariadb-10.3.35)
-	NOTE: POC does not coredump for mariadb10.1 and warn about not supported default column
 CVE-2022-27385 (An issue in the component Used_tables_and_const_cache::used_tables_and ...)
 	- mariadb-10.6 1:10.6.8-1
 	- mariadb-10.5 <removed>



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/71ea72ad1f95fcc9a6ca15856a32dc7088e70dc4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/71ea72ad1f95fcc9a6ca15856a32dc7088e70dc4
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240824/fd02251c/attachment.htm>