[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sun Apr 27 11:27:33 BST 2025



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6a6f8be5 by Salvatore Bonaccorso at 2025-04-27T12:27:09+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,11 +1,11 @@
 CVE-2025-46675 (In NASA CryptoLib before 1.3.2, the key state is not checked before us ...)
-	TODO: check
+	NOT-FOR-US: NASA CryptoLib
 CVE-2025-46674 (NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work i ...)
-	TODO: check
+	NOT-FOR-US: NASA CryptoLib
 CVE-2025-46673 (NASA CryptoLib before 1.3.2 does not check whether the SA is in an ope ...)
-	TODO: check
+	NOT-FOR-US: NASA CryptoLib
 CVE-2025-46672 (NASA CryptoLib before 1.3.2 does not check the OTAR crypto function re ...)
-	TODO: check
+	NOT-FOR-US: NASA CryptoLib
 CVE-2025-46656 (python-markdownify (aka markdownify) before 0.14.1 allows large headli ...)
 	TODO: check
 CVE-2025-46655 (CodiMD through 2.5.4 has a CSP-based protection mechanism against XSS  ...)
@@ -29,17 +29,17 @@ CVE-2025-46575 (There is an information disclosure vulnerability in the GoldenDB
 CVE-2025-46574 (There is an information disclosure vulnerability in the GoldenDB datab ...)
 	NOT-FOR-US: ZTE
 CVE-2025-3963 (A vulnerability, which was classified as critical, has been found in w ...)
-	TODO: check
+	NOT-FOR-US: withstars Books-Management-System
 CVE-2025-3962 (A vulnerability classified as problematic was found in withstars Books ...)
-	TODO: check
+	NOT-FOR-US: withstars Books-Management-System
 CVE-2025-3961 (A vulnerability classified as problematic has been found in withstars  ...)
-	TODO: check
+	NOT-FOR-US: withstars Books-Management-System
 CVE-2025-3960 (A vulnerability was found in withstars Books-Management-System 1.0. It ...)
-	TODO: check
+	NOT-FOR-US: withstars Books-Management-System
 CVE-2025-3959 (A vulnerability was found in withstars Books-Management-System 1.0. It ...)
-	TODO: check
+	NOT-FOR-US: withstars Books-Management-System
 CVE-2025-3958 (A vulnerability was found in withstars Books-Management-System 1.0. It ...)
-	TODO: check
+	NOT-FOR-US: withstars Books-Management-System
 CVE-2025-3957 (A vulnerability was found in opplus springboot-admin 1.0 and classifie ...)
 	TODO: check
 CVE-2025-3956 (A vulnerability has been found in 201206030 novel-cloud 1.4.0 and clas ...)
@@ -47,7 +47,7 @@ CVE-2025-3956 (A vulnerability has been found in 201206030 novel-cloud 1.4.0 and
 CVE-2025-3955 (A vulnerability, which was classified as critical, was found in codepr ...)
 	NOT-FOR-US: code-projects
 CVE-2025-3954 (A vulnerability, which was classified as problematic, has been found i ...)
-	TODO: check
+	NOT-FOR-US: ChurchCRM
 CVE-2024-52888 (For an authenticated end-user the portal may run a script while attemp ...)
 	TODO: check
 CVE-2024-52887 (Authenticated end-user may set a specially crafted SNX bookmark that c ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6a6f8be5fe862461f7fb540ce66985702f710fb8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6a6f8be5fe862461f7fb540ce66985702f710fb8
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250427/2e40fd12/attachment.htm>


More information about the debian-security-tracker-commits mailing list