[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
068616e5 by Salvatore Bonaccorso at 2024-05-07T17:36:09+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -154,13 +154,13 @@ CVE-2024-34538 (Mateso PasswordSafe through 8.13.9.26689 has Weak Cryptography.)
 CVE-2024-34529 (Nebari through 2024.4.1 prints the temporary Keycloak root password.)
 	NOT-FOR-US: Nebari
 CVE-2024-34528 (WordOps through 3.20.0 has a wo/cli/plugins/stack_pref.py TOCTOU race  ...)
-	TODO: check
+	NOT-FOR-US: WordOps
 CVE-2024-34527 (spaces_plugin/app.py in SolidUI 0.4.0 has an unnecessary print stateme ...)
 	NOT-FOR-US: SolidUI
 CVE-2024-34525 (FileCodeBox 2.0 stores a OneDrive password and AWS key in a cleartext  ...)
 	NOT-FOR-US: FileCodeBox
 CVE-2024-34524 (In XLANG OpenAgents through fe73ac4, the allowed_file protection mecha ...)
-	TODO: check
+	NOT-FOR-US: XLANG OpenAgents
 CVE-2024-34519 (Avantra Server 24.x before 24.0.7 and 24.1.x before 24.1.1 mishandles  ...)
 	NOT-FOR-US: Avantra Server
 CVE-2024-34515 (image-optimizer before 1.7.3 allows PHAR deserialization, e.g., the ph ...)
@@ -220,15 +220,15 @@ CVE-2024-34367 (Cross-Site Request Forgery (CSRF) vulnerability in Popup Box Tea
 CVE-2024-34366 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2024-34252 (wasm3 v0.5.0 was discovered to contain a global buffer overflow which  ...)
-	TODO: check
+	NOT-FOR-US: wasm3
 CVE-2024-34251 (An out-of-bound memory read vulnerability was discovered in Bytecode A ...)
 	TODO: check
 CVE-2024-34250 (A heap buffer overflow vulnerability was discovered in Bytecode Allian ...)
 	TODO: check
 CVE-2024-34249 (wasm3 v0.5.0 was discovered to contain a heap buffer overflow which le ...)
-	TODO: check
+	NOT-FOR-US: wasm3
 CVE-2024-34246 (wasm3 v0.5.0 was discovered to contain an out-of-bound memory read whi ...)
-	TODO: check
+	NOT-FOR-US: wasm3
 CVE-2024-34093 (An issue was discovered in Archer Platform 6 before 2024.03. There is  ...)
 	NOT-FOR-US: Archer Platform
 CVE-2024-34092 (An issue was discovered in Archer Platform 6 before 2024.04. Authentic ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/068616e5bb44b2c271d878eda59e7bc61c8e32b7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/068616e5bb44b2c271d878eda59e7bc61c8e32b7
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240507/ddfd38a4/attachment.htm>