Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
edd19b68 by Salvatore Bonaccorso at 2022-06-29T21:31:56+02:00
Process two NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -54377,7 +54377,7 @@ CVE-2021-41462 (Cross-site scripting (XSS)
vulnerability in concrete/elements/co
CVE-2021-41461 (Cross-site scripting (XSS) vulnerability in
concrete/elements/collecti ...)
NOT-FOR-US: concrete5-legacy
CVE-2021-41460 (ECShop 4.1.0 has SQL injection vulnerability, which can be
exploited b ...)
- TODO: check
+ NOT-FOR-US: ECShop
CVE-2021-41459 (There is a stack buffer overflow in MP4Box v1.0.1 at
src/filters/dmx_n ...)
- gpac 2.0.0+dfsg1-2
[buster] - gpac <not-affected> (Vulnerable code not present)
@@ -55694,7 +55694,7 @@ CVE-2021-40945
CVE-2021-40944 (In GPAC MP4Box 1.1.0, there is a Null pointer reference in the
functio ...)
TODO: check
CVE-2021-40943 (In Bento4 1.6.0-638, there is a null pointer reference in the
function ...)
- TODO: check
+ NOT-FOR-US: Bento4
CVE-2021-40942 (In GPAC MP4Box v1.1.0, there is a heap-buffer-overflow in the
function ...)
- gpac 2.0.0+dfsg1-2
NOTE: https://github.com/gpac/gpac/issues/1908
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/edd19b684351e015445570b68963f7a1d1c962a5
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/edd19b684351e015445570b68963f7a1d1c962a5
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
