[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff (@jmm) jmm at debian.org
Wed Jan 29 19:26:12 GMT 2025



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
edab527b by Moritz Muehlenhoff at 2025-01-29T20:25:45+01:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -128,31 +128,31 @@ CVE-2024-7881 (An unprivileged context can trigger a data memory-dependent prefe
 CVE-2024-6351 (A malformed packet can cause a buffer overflow in the NWK/APS layer of ...)
 	NOT-FOR-US: Ember ZNet
 CVE-2024-40677 (In shouldSkipForInitialSUW of AdvancedPowerUsageDetail.java, there is  ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2024-40676 (In checkKeyIntent of AccountManagerService.java, there is a possible w ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2024-40675 (In parseUriInternal of Intent.java, there is a possible infinite loop  ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2024-40674 (In validateSsid of WifiConfigurationUtil.java, there is a possible way ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2024-40673 (In Source of ZipFile.java, there is a possible way for an attacker to  ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2024-40672 (In onCreate of ChooserActivity.java, there is a possible way to bypass ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2024-40670 (In TBD of TBD, there is a possible use after free due to a race condit ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2024-40669 (In TBD of TBD, there is a possible use after free due to a race condit ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2024-40651 (In TBD of TBD, there is a possible use-after-free due to a logic error ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2024-40649 (In TBD of TBD, there is a possible use-after-free due to a logic error ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2024-34748 (In _DevmemXReservationPageAddress of devicemem_server.c, there is a po ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2024-34733 (In DevmemXIntMapPages of devicemem_server.c, there is a possible arbit ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2024-34732 (In RGXMMUCacheInvalidate of rgxmem.c, there is a possible arbitrary co ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2024-23953 (Use of Arrays.equals() in LlapSignerImpl inApache Hive to compare mess ...)
 	NOT-FOR-US: Apache Hive
 CVE-2024-13527 (The Philantro \u2013 Donations and Donor Management plugin for WordPre ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/edab527b72df1166553cc6bf49622d8ca59e5b9e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/edab527b72df1166553cc6bf49622d8ca59e5b9e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250129/38275cdd/attachment.htm>


More information about the debian-security-tracker-commits mailing list