Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
fb002b03 by Salvatore Bonaccorso at 2022-09-19T20:53:23+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -349,7 +349,7 @@ CVE-2022-40780
 CVE-2022-40779
        RESERVED
 CVE-2022-40778 (A stored Cross-Site Scripting (XSS) vulnerability in OPSWAT 
MetaDefend ...)
-       TODO: check
+       NOT-FOR-US: OPSWAT MetaDefender ICAP Server
 CVE-2022-40777
        RESERVED
 CVE-2022-40776
@@ -367,7 +367,7 @@ CVE-2022-40771
 CVE-2022-40770
        RESERVED
 CVE-2022-40769 (profanity through 1.60 has only four billion possible RNG 
initializati ...)
-       TODO: check
+       NOT-FOR-US: profanity (not same as src:profanity)
 CVE-2022-40768 (drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows 
local us ...)
        - linux <unfixed>
        NOTE: https://www.openwall.com/lists/oss-security/2022/09/09/1
@@ -457,7 +457,7 @@ CVE-2022-3227
 CVE-2022-3226
        RESERVED
 CVE-2022-3225 (Improper Access Control in GitHub repository budibase/budibase 
prior t ...)
-       TODO: check
+       NOT-FOR-US: budibase
 CVE-2022-3224 (Misinterpretation of Input in GitHub repository 
ionicabizau/parse-url  ...)
        NOT-FOR-US: Node parse-url
 CVE-2022-3223 (Cross-site Scripting (XSS) - Stored in GitHub repository 
jgraph/drawio ...)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fb002b03a3cf3036c51d947979acfd3f568d3284

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fb002b03a3cf3036c51d947979acfd3f568d3284
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to