[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Nov 18 09:04:33 GMT 2025



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a18fcc72 by Salvatore Bonaccorso at 2025-11-18T10:03:56+01:00
Process NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -13,7 +13,7 @@ CVE-2025-7623 (Stack-based buffer overflow in the SMASH-CLP shell. An authentica
 CVE-2025-6599 (An uncontrolled resource consumption vulnerability in the web server o ...)
 	NOT-FOR-US: Zyxel
 CVE-2025-64766 (NixOS's Onlyoffice is a software suite that offers online and offline  ...)
-	TODO: check
+	NOT-FOR-US: NixOS Onlyoffice
 CVE-2025-64734 (Missing Release of Resource after Effective Lifetime (CWE-772) in the  ...)
 	NOT-FOR-US: Gallagher
 CVE-2025-52578 (Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335)  ...)
@@ -23,15 +23,15 @@ CVE-2025-52457 (Observable Timing Discrepancy (CWE-208) in HBUS devices may allo
 CVE-2025-48593 (In bta_hf_client_cb_init of bta_hf_client_main.cc, there is a possible ...)
 	NOT-FOR-US: Android
 CVE-2025-36553 (A buffer overflow vulnerability exists in the CvManager functionality  ...)
-	TODO: check
+	NOT-FOR-US: Dell
 CVE-2025-36463 (Multiple out-of-bounds read and write vulnerabilities exist in the Con ...)
-	TODO: check
+	NOT-FOR-US: Dell
 CVE-2025-36462 (Multiple out-of-bounds read and write vulnerabilities exist in the Con ...)
-	TODO: check
+	NOT-FOR-US: Dell
 CVE-2025-36461 (Multiple out-of-bounds read and write vulnerabilities exist in the Con ...)
-	TODO: check
+	NOT-FOR-US: Dell
 CVE-2025-36460 (Multiple out-of-bounds read and write vulnerabilities exist in the Con ...)
-	TODO: check
+	NOT-FOR-US: Dell
 CVE-2025-36357 (IBM Planning Analytics Local 2.1.0 through 2.1.14 could allow a remote ...)
 	NOT-FOR-US: IBM
 CVE-2025-36299 (IBM Planning Analytics Local 2.1.0 through 2.1.14 stores sensitive inf ...)
@@ -39,11 +39,11 @@ CVE-2025-36299 (IBM Planning Analytics Local 2.1.0 through 2.1.14 stores sensiti
 CVE-2025-36118 (IBM Storage Virtualize 8.4, 8.5, 8.7, and 9.1 IKEv1 implementation all ...)
 	NOT-FOR-US: IBM
 CVE-2025-32089 (A buffer overflow vulnerability exists in the CvManager_SBI functional ...)
-	TODO: check
+	NOT-FOR-US: Dell
 CVE-2025-31649 (A hard-coded password vulnerability exists in the ControlVault WBDI Dr ...)
-	TODO: check
+	NOT-FOR-US: Dell
 CVE-2025-31361 (A privilege escalation vulnerability exists in the ControlVault WBDI D ...)
-	TODO: check
+	NOT-FOR-US: Dell
 CVE-2025-13325 (A vulnerability was determined in itsourcecode Student Information Sys ...)
 	NOT-FOR-US: itsourcecode System
 CVE-2025-13323 (A security flaw has been discovered in code-projects Simple Pizza Orde ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a18fcc725e35aee72c6daa634c740b93fad53279

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a18fcc725e35aee72c6daa634c740b93fad53279
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251118/e615dccb/attachment.htm>


More information about the debian-security-tracker-commits mailing list