Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
daabe39a by Salvatore Bonaccorso at 2021-01-07T09:41:46+01:00
Process some more NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1097,7 +1097,7 @@ CVE-2020-36179 (FasterXML jackson-databind 2.x before
2.9.10.8 mishandles the in
NOTE: Starting from 2.10 series mitigated as Safe Default Typing is
enabled by default
NOTE: but still an issue when Default Typing is enabled.
CVE-2020-36178 (oal_ipt_addBridgeIsolationRules on TP-Link TL-WR840N
6_EU_0.9.1_4.16 d ...)
- TODO: check
+ NOT-FOR-US: TP-Link
CVE-2021-3029
RESERVED
CVE-2021-3028
@@ -8626,7 +8626,7 @@ CVE-2020-35264
CVE-2020-35263
RESERVED
CVE-2020-35262 (Cross Site Scripting (XSS) vulnerability in Digisol DG-HR3400
can be e ...)
- TODO: check
+ NOT-FOR-US: Digisol
CVE-2020-35261
RESERVED
CVE-2020-35260
@@ -12176,7 +12176,7 @@ CVE-2020-29043 (An issue was discovered in
BigBlueButton through 2.2.29. When at
CVE-2020-29042 (An issue was discovered in BigBlueButton through 2.2.29. A
brute-force ...)
NOT-FOR-US: BigBlueButton
CVE-2020-29041 (A misconfiguration in Web-Sesame 2020.1.1.3375 allows an
unauthenticat ...)
- TODO: check
+ NOT-FOR-US: Web-Sesame
CVE-2020-29040 (An issue was discovered in Xen through 4.14.x allowing x86 HVM
guest O ...)
- xen 4.14.0+88-g1d1d1f5391-1 (bug #976109)
[buster] - xen <not-affected> (Patches for XSA-346 not applied)
@@ -23791,7 +23791,7 @@ CVE-2020-25500
CVE-2020-25499 (TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated
remote use ...)
NOT-FOR-US: TOTOLINK
CVE-2020-25498 (Cross Site Scripting (XSS) vulnerability in Beetel router
777VR1 can b ...)
- TODO: check
+ NOT-FOR-US: Beetel
CVE-2020-25497
RESERVED
CVE-2020-25496
@@ -65263,9 +65263,9 @@ CVE-2020-8277 (A Node.js application that allows an
attacker to trigger a DNS re
CVE-2020-8276 (The implementation of Brave Desktop's privacy-preserving
analytics sys ...)
NOT-FOR-US: Brave
CVE-2020-8275 (Citrix Secure Mail for Android before 20.11.0 suffers from
improper ac ...)
- TODO: check
+ NOT-FOR-US: Citrix
CVE-2020-8274 (Citrix Secure Mail for Android before 20.11.0 suffers from
Improper Co ...)
- TODO: check
+ NOT-FOR-US: Citrix
CVE-2020-8273 (Privilege escalation of an authenticated user to root in Citrix
SD-WAN ...)
NOT-FOR-US: Citrix SD-WAN center
CVE-2020-8272 (Authentication Bypass resulting in exposure of SD-WAN
functionality in ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/daabe39a149cd80a77eb90741ac9d75bca5c12fb
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/daabe39a149cd80a77eb90741ac9d75bca5c12fb
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
