Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
c92f00d3 by Salvatore Bonaccorso at 2021-03-17T09:44:37+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -564,9 +564,9 @@ CVE-2021-28383
CVE-2021-28382
RESERVED
CVE-2021-28381 (The vhs (aka VHS: Fluid ViewHelpers) extension before 5.1.1
for TYPO3 ...)
- TODO: check
+ NOT-FOR-US: vhs (aka VHS: Fluid ViewHelpers) extension for TYPO3
CVE-2021-28380 (The aimeos (aka Aimeos shop and e-commerce framework)
extension before ...)
- TODO: check
+ NOT-FOR-US: aimeos (aka Aimeos shop and e-commerce framework) extension
for TYPO3
CVE-2021-28379 (web/upload/UploadHandler.php in Vesta Control Panel (aka
VestaCP) thro ...)
NOT-FOR-US: Vesta Control Panel
CVE-2021-28378 (Gitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain
issue dat ...)
@@ -745,9 +745,9 @@ CVE-2021-28297
CVE-2021-28296
RESERVED
CVE-2021-28295 (Online Ordering System 1.0 is vulnerable to unauthenticated
SQL inject ...)
- TODO: check
+ NOT-FOR-US: Online Ordering System
CVE-2021-28294 (Online Ordering System 1.0 is vulnerable to arbitrary file
upload thro ...)
- TODO: check
+ NOT-FOR-US: Online Ordering System
CVE-2021-28293
RESERVED
CVE-2021-28292
@@ -39997,9 +39997,9 @@ CVE-2020-24265 (An issue was discovered in tcpreplay
tcpprep v4.3.3. There is a
NOTE: https://github.com/appneta/tcpreplay/issues/616
NOTE: Crash in CLI tool, no security impact
CVE-2020-24264 (Portainer 1.24.1 and earlier is affected by incorrect access
control t ...)
- TODO: check
+ NOT-FOR-US: Portainer
CVE-2020-24263 (Portainer 1.24.1 and earlier is affected by an insecure
permissions vu ...)
- TODO: check
+ NOT-FOR-US: Portainer
CVE-2020-24262
RESERVED
CVE-2020-24261
@@ -70789,7 +70789,7 @@ CVE-2020-11307
CVE-2020-11306
RESERVED
CVE-2020-11305 (Integer overflow in boot due to improper length check on
arguments rec ...)
- TODO: check
+ NOT-FOR-US: Snapdragon
CVE-2020-11304
RESERVED
CVE-2020-11303
@@ -70949,7 +70949,7 @@ CVE-2020-11232
CVE-2020-11231
RESERVED
CVE-2020-11230 (Potential arbitrary memory corruption when the qseecom driver
updates ...)
- TODO: check
+ NOT-FOR-US: Snapdragon
CVE-2020-11229
RESERVED
CVE-2020-11228 (Part of RPM region was not protected from xblSec itself due to
imprope ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c92f00d3cd0652347839ddb2fa50dd4c5ba141bd
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c92f00d3cd0652347839ddb2fa50dd4c5ba141bd
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
