[Git][security-tracker-team/security-tracker][master] Mark several of the Apple related CVEs as NFU
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri Mar 8 21:57:47 GMT 2024
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
184920cb by Salvatore Bonaccorso at 2024-03-08T22:56:47+01:00
Mark several of the Apple related CVEs as NFU
Should it later turn out that any of the CVEs is e.g. affecting
webkit2gtk, then we can re-adjust the tracking.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -91,135 +91,135 @@ CVE-2024-25327 (Cross Site Scripting (XSS) vulnerability in Justice Systems Full
CVE-2024-24035 (Cross Site Scripting (XSS) vulnerability in Setor Informatica SIL 3.1 ...)
NOT-FOR-US: Setor Informatica SIL
CVE-2024-23297 (The issue was addressed with improved checks. This issue is fixed in t ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23295 (A permissions issue was addressed to help ensure Personas are always p ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23294 (This issue was addressed by removing the vulnerable code. This issue i ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23293 (This issue was addressed through improved state management. This issue ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23292 (This issue was addressed with improved data protection. This issue is ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23291 (A privacy issue was addressed with improved private data redaction for ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23290 (A logic issue was addressed with improved restrictions. This issue is ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23289 (A lock screen issue was addressed with improved state management. This ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23288 (This issue was addressed by removing the vulnerable code. This issue i ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23287 (A privacy issue was addressed with improved handling of temporary file ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23286 (A buffer overflow issue was addressed with improved memory handling. T ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23285 (This issue was addressed with improved handling of symlinks. This issu ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23284 (A logic issue was addressed with improved state management. This issue ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23283 (A privacy issue was addressed with improved private data redaction for ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23281 (This issue was addressed with improved state management. This issue is ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23280 (An injection issue was addressed with improved validation. This issue ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23279 (A privacy issue was addressed with improved private data redaction for ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23278 (The issue was addressed with improved checks. This issue is fixed in m ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23277 (The issue was addressed with improved checks. This issue is fixed in m ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23276 (A logic issue was addressed with improved checks. This issue is fixed ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23275 (A race condition was addressed with additional validation. This issue ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23274 (An injection issue was addressed with improved input validation. This ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23273 (This issue was addressed through improved state management. This issue ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23272 (A logic issue was addressed with improved checks. This issue is fixed ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23270 (The issue was addressed with improved memory handling. This issue is f ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23269 (A downgrade issue affecting Intel-based Mac computers was addressed wi ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23268 (An injection issue was addressed with improved input validation. This ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23267 (The issue was addressed with improved checks. This issue is fixed in m ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23266 (The issue was addressed with improved checks. This issue is fixed in m ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23265 (A memory corruption vulnerability was addressed with improved locking. ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23264 (A validation issue was addressed with improved input sanitization. Thi ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23263 (A logic issue was addressed with improved validation. This issue is fi ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23262 (This issue was addressed with additional entitlement checks. This issu ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23260 (This issue was addressed by removing additional entitlements. This iss ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23259 (The issue was addressed with improved checks. This issue is fixed in i ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23258 (An out-of-bounds read was addressed with improved input validation. Th ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23257 (The issue was addressed with improved memory handling. This issue is f ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23255 (An authentication issue was addressed with improved state management. ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23254 (The issue was addressed with improved UI handling. This issue is fixed ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23253 (A permissions issue was addressed with additional restrictions. This i ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23252 (The issue was addressed with improved memory handling. This issue is f ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23250 (An access issue was addressed with improved access restrictions. This ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23249 (The issue was addressed with improved memory handling. This issue is f ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23248 (The issue was addressed with improved memory handling. This issue is f ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23247 (The issue was addressed with improved memory handling. This issue is f ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23246 (This issue was addressed by removing the vulnerable code. This issue i ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23245 (This issue was addressed by adding an additional prompt for user conse ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23244 (A logic issue was addressed with improved restrictions. This issue is ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23242 (A privacy issue was addressed by not logging contents of text fields. ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23241 (This issue was addressed through improved state management. This issue ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23240 (The issue was addressed with improved checks. This issue is fixed in i ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23239 (A race condition was addressed with improved state handling. This issu ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23238 (An access issue was addressed with improved access restrictions. This ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23235 (A race condition was addressed with additional validation. This issue ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23234 (An out-of-bounds write issue was addressed with improved input validat ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23233 (This issue was addressed with improved checks. This issue is fixed in ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23232 (A privacy issue was addressed with improved handling of temporary file ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23231 (A privacy issue was addressed with improved private data redaction for ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23230 (This issue was addressed with improved file handling. This issue is fi ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23227 (This issue was addressed with improved redaction of sensitive informat ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23226 (The issue was addressed with improved memory handling. This issue is f ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23220 (The issue was addressed with improved handling of caches. This issue i ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23216 (A path handling issue was addressed with improved validation. This iss ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23205 (A privacy issue was addressed with improved private data redaction for ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-23201 (A permissions issue was addressed with additional restrictions. This i ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-1987 (The WP-Members Membership Plugin plugin for WordPress is vulnerable to ...)
NOT-FOR-US: WordPress plugin
CVE-2024-1986 (The Booster Elite for WooCommerce plugin for WordPress is vulnerable t ...)
@@ -229,7 +229,7 @@ CVE-2024-1851 (The affiliate-toolkit \u2013 WordPress Affiliate Plugin plugin fo
CVE-2024-1802 (The EmbedPress \u2013 Embed PDF, Google Docs, Vimeo, Wistia, Embed You ...)
NOT-FOR-US: WordPress plugin
CVE-2024-0258 (The issue was addressed with improved memory handling. This issue is f ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2023-46172 (IBM DS8900F HMC 89.21.19.0, 89.21.31.0, 89.30.68.0, 89.32.40.0, and 89 ...)
NOT-FOR-US: IBM
CVE-2023-46171 (IBM DS8900F HMC 89.21.19.0, 89.21.31.0, 89.30.68.0, 89.32.40.0, and 89 ...)
@@ -239,7 +239,7 @@ CVE-2023-46170 (IBM DS8900F HMC 89.21.19.0, 89.21.31.0, 89.30.68.0, 89.32.40.0,
CVE-2023-46169 (IBM DS8900F HMC 89.21.19.0, 89.21.31.0, 89.30.68.0, 89.32.40.0, and 89 ...)
NOT-FOR-US: IBM
CVE-2023-28826 (This issue was addressed with improved redaction of sensitive informat ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2024-2245 (Cross-Site Scripting vulnerability in moziloCMS version 2.0. By sendin ...)
NOT-FOR-US: moziloCMS
CVE-2024-2241 (Improper access control in the user interface in Devolutions Workspace ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/184920cbaa17cfc22cd9483f7e85360958127c50
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/184920cbaa17cfc22cd9483f7e85360958127c50
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240308/37707d67/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list