[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Dec 25 06:49:41 GMT 2024



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f0ba9ed6 by Salvatore Bonaccorso at 2024-12-25T07:47:15+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -73,17 +73,17 @@ CVE-2024-53145 (In the Linux kernel, the following vulnerability has been resolv
 	- linux 6.12.3-1
 	NOTE: https://git.kernel.org/linus/a98b7761f697e590ed5d610d87fa12be66f23419 (6.13-rc1)
 CVE-2024-43441 (Authentication Bypass by Assumed-Immutable Data vulnerability in Apach ...)
-	TODO: check
+	NOT-FOR-US: Apache HugeGraph-Server
 CVE-2024-12881 (The PlugVersions \u2013 Easily rollback to previous versions of your p ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2024-12850 (The Database Backup and check Tables Automated With Scheduler 2024 plu ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2024-12746 (A SQL injection in the Amazon Redshift ODBC Driver v2.1.5.0 (Windows o ...)
-	TODO: check
+	NOT-FOR-US: Amazon Redshift ODBC Driver
 CVE-2024-12745 (A SQL injection in the Amazon Redshift Python Connector v2.1.4 allows  ...)
-	TODO: check
+	NOT-FOR-US: Amazon Redshift Python Connector
 CVE-2024-12744 (A SQL injection in the Amazon Redshift JDBC Driver in v2.1.0.31 allows ...)
-	TODO: check
+	NOT-FOR-US: Amazon Redshift JDBC Driver
 CVE-2024-12468 (The WP Datepicker plugin for WordPress is vulnerable to Reflected Cros ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2024-12268 (The Responsive Blocks \u2013 WordPress Gutenberg Blocks plugin for Wor ...)
@@ -107,17 +107,17 @@ CVE-2024-53961 (ColdFusion versions 2023.11, 2021.17 and earlier are affected by
 CVE-2024-47515 (A vulnerability was found in Pagure. Support of symbolic links during  ...)
 	TODO: check
 CVE-2024-41887 (Team ENVY, a Security Research TEAM has found a flaw that allows for a ...)
-	TODO: check
+	NOT-FOR-US: HanWha
 CVE-2024-41886 (Team ENVY, a Security Research TEAM has found a flaw that allows for a ...)
-	TODO: check
+	NOT-FOR-US: HanWha
 CVE-2024-41885 (Team ENVY, a Security Research TEAM has found a flaw that allows for a ...)
-	TODO: check
+	NOT-FOR-US: HanWha
 CVE-2024-41884 (Team ENVY, a Security Research TEAM has found a flaw that allows for a ...)
-	TODO: check
+	NOT-FOR-US: HanWha
 CVE-2024-41883 (Team ENVY, a Security Research TEAM has found a flaw that allows for a ...)
-	TODO: check
+	NOT-FOR-US: HanWha
 CVE-2024-41882 (Team ENVY, a Security Research TEAM has found a flaw that allows for a ...)
-	TODO: check
+	NOT-FOR-US: HanWha
 CVE-2024-12814 (The Loan Comparison plugin for WordPress is vulnerable to Stored Cross ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2024-12710 (The WP-Appbox plugin for WordPress is vulnerable to Reflected Cross-Si ...)
@@ -447481,7 +447481,7 @@ CVE-2019-2485 (Vulnerability in the Oracle Mobile Field Service component of Ora
 CVE-2019-2484 (Vulnerability in the Application Express component of Oracle Database  ...)
 	NOT-FOR-US: Oracle
 CVE-2019-2483 (Vulnerability in the Oracle iStore product of Oracle E-Business Suite  ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2019-2482 (Vulnerability in the MySQL Server component of Oracle MySQL (subcompon ...)
 	- mysql-5.7 5.7.25-1 (bug #919817)
 CVE-2019-2481 (Vulnerability in the MySQL Server component of Oracle MySQL (subcompon ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f0ba9ed6356e08303db9608503ca223c7e4c1da7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f0ba9ed6356e08303db9608503ca223c7e4c1da7
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241225/10b2a6d9/attachment.htm>


More information about the debian-security-tracker-commits mailing list