[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
51b63950 by Salvatore Bonaccorso at 2025-08-11T10:20:30+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,11 +1,11 @@
 CVE-2025-8854 (Stack-based buffer overflow in LoadOFF in bulletphysics bullet3 before ...)
-	TODO: check
+	NOT-FOR-US: bulletphysics bullet3
 CVE-2025-8836 (A vulnerability was determined in JasPer up to 4.2.5. Affected by this ...)
 	TODO: check
 CVE-2025-8835 (A vulnerability was found in JasPer up to 4.2.5. Affected by this vuln ...)
 	TODO: check
 CVE-2025-8834 (A vulnerability has been found in JCG Link-net LW-N915R 17s.20.001.908 ...)
-	TODO: check
+	NOT-FOR-US: JCG Link-net LW-N915R
 CVE-2025-8833 (A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE65 ...)
 	NOT-FOR-US: Linksys
 CVE-2025-8832 (A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE65 ...)
@@ -4256,7 +4256,7 @@ CVE-2025-8058 (The regcomp function in the GNU C library version from 2.4 to 2.4
 	NOTE: Inroduced with: https://sourceware.org/git/?p=glibc.git;a=commit;h=963d8d782fc98fb6dc3a66f0068795f9920c269d
 	NOTE: Fixed by: https://sourceware.org/git/?p=glibc.git;a=commit;h=7ea06e994093fa0bcca0d0ee2c1db271d8d7885d
 CVE-2025-8022 (Versions of the package bun after 0.0.12 are vulnerable to Improper Ne ...)
-	TODO: check
+	NOT-FOR-US: bun
 CVE-2025-8021 (All versions of the package files-bucket-server are vulnerable to Dire ...)
 	NOT-FOR-US: files-bucket-server Node.js module
 CVE-2025-8020 (All versions of the package private-ip are vulnerable to Server-Side R ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/51b6395080c8632b491628ff7fb974f01d18adf8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/51b6395080c8632b491628ff7fb974f01d18adf8
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250811/28dee263/attachment-0001.htm>