Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b6e1cbe1 by Salvatore Bonaccorso at 2020-10-24T10:44:37+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -27,7 +27,7 @@ CVE-2020-27680
CVE-2020-27679
RESERVED
CVE-2020-27678 (An issue was discovered in illumos before 2020-10-22, as used
in OmniO ...)
- TODO: check
+ NOT-FOR-US: illumos
CVE-2020-27677
RESERVED
CVE-2020-27676
@@ -1036,7 +1036,7 @@ CVE-2020-27390
CVE-2020-27389
RESERVED
CVE-2020-27388 (Multiple Stored Cross Site Scripting (XSS) vulnerabilities
exist in th ...)
- TODO: check
+ NOT-FOR-US: YOURLS Admin Panel
CVE-2020-27387
RESERVED
CVE-2020-27386
@@ -47527,17 +47527,17 @@ CVE-2020-7752
CVE-2020-7751
RESERVED
CVE-2020-7750 (This affects the package scratch-svg-renderer before
0.2.0-prerelease. ...)
- TODO: check
+ NOT-FOR-US: scratch-svg-renderer nodejs module
CVE-2020-7749 (This affects all versions of package osm-static-maps. User
input given ...)
- TODO: check
+ NOT-FOR-US: osm-static-maps nodejs module
CVE-2020-7748 (This affects the package @tsed/core before 5.65.7. This
vulnerability ...)
TODO: check
CVE-2020-7747 (This affects all versions of package lightning-server. It is
possible ...)
- TODO: check
+ NOT-FOR-US: lightning-server nodejs module
CVE-2020-7746
RESERVED
CVE-2020-7745 (This affects the package MintegralAdSDK before 6.6.0.0. The SDK
distri ...)
- TODO: check
+ NOT-FOR-US: MintegralAdSDK
CVE-2020-7744 (This affects all versions of package com.mintegral.msdk:alphab.
The An ...)
NOT-FOR-US: com.mintegral.msdk:alphab
CVE-2020-7743 (The package mathjs before 7.5.1 are vulnerable to Prototype
Pollution ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b6e1cbe1a8cb3c7f6142681fe5e1cb43330f3fb4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b6e1cbe1a8cb3c7f6142681fe5e1cb43330f3fb4
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits