[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e27fd304 by Moritz Muehlenhoff at 2025-04-18T23:37:50+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -32,11 +32,11 @@ CVE-2025-32796 (Dify is an open-source LLM app development platform. Prior to ve
 CVE-2025-32795 (Dify is an open-source LLM app development platform. Prior to version  ...)
 	NOT-FOR-US: Dify
 CVE-2025-32792 (SES safely executes third-party JavaScript 'strict' mode programs in c ...)
-	TODO: check
+	NOT-FOR-US: Node ses
 CVE-2025-32790 (Dify is an open-source LLM app development platform. In versions 0.6.8 ...)
 	NOT-FOR-US: Dify
 CVE-2025-32442 (Fastify is a fast and low overhead web framework, for Node.js. In vers ...)
-	TODO: check
+	NOT-FOR-US: Fastify
 CVE-2025-32434 (PyTorch is a Python package that provides tensor computation with stro ...)
 	TODO: check
 CVE-2025-32389 (NamelessMC is a free, easy to use & powerful website software for Mine ...)
@@ -56,7 +56,7 @@ CVE-2025-2950 (IBM i 7.3, 7.4, 7.5, and 7.5 is vulnerable to a host header injec
 CVE-2025-2492 (An improper authentication control vulnerability exists in AiCloud. Th ...)
 	NOT-FOR-US: ASUS
 CVE-2025-29953 (Deserialization of Untrusted Data vulnerability in Apache ActiveMQ NMS ...)
-	TODO: check
+	NOT-FOR-US: Apache ActiveMQ NMS OpenWire Client
 CVE-2025-29784 (NamelessMC is a free, easy to use & powerful website software for Mine ...)
 	NOT-FOR-US: NamelessMC
 CVE-2025-29625 (A buffer overflow vulnerability in Astrolog v7.70 allows attackers to  ...)
@@ -96,7 +96,7 @@ CVE-2025-28197 (Crawl4AI <=0.4.247 is vulnerable to SSRF in /crawl4ai/async_disp
 CVE-2025-28059 (An access control vulnerability in Nagios Network Analyzer 2024R1.0.3  ...)
 	NOT-FOR-US: Nagios Network Analyzer
 CVE-2025-27599 (Element X Android is a Matrix Android Client provided by element.io. P ...)
-	TODO: check
+	NOT-FOR-US: Element X Android
 CVE-2025-25985 (An issue in Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (Hw_H ...)
 	NOT-FOR-US: Macro-video Technologies
 CVE-2025-25984 (An issue in Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (Hw_H ...)
@@ -108,7 +108,7 @@ CVE-2025-24914 (When installing Nessus to a non-default location on a Windows ho
 CVE-2025-1697 (A potential security vulnerability has been identified in the HP Touch ...)
 	NOT-FOR-US: HP
 CVE-2024-57493 (An issue in redoxOS relibc before commit 98aa4ea5 allows a local attac ...)
-	TODO: check
+	NOT-FOR-US: redoxOS relibc
 CVE-2024-49808 (IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 could ...)
 	NOT-FOR-US: IBM
 CVE-2024-46089 (74cms <=3.33 is vulnerable to remote code execution (RCE) in the backg ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e27fd3044734bc0817098288e59a8136808efcee

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e27fd3044734bc0817098288e59a8136808efcee
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250418/806003e8/attachment-0001.htm>