Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
03b09e87 by Moritz Muehlenhoff at 2021-06-30T15:12:44+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -404994,7 +404994,7 @@ CVE-2010-4818 (The GLX extension in X.Org xserver 
1.7.7 allows remote authentica
 CVE-2010-4817 (pithos before 0.3.5 allows overwrite of arbitrary files via 
symlinks. ...)
        - pithos 0.3.5-1
 CVE-2010-4816 (It was found in FreeBSD 8.0, 6.3 and 4.9, and OpenBSD 4.6 that 
a null  ...)
-       TODO: check
+       NOT-FOR-US: Historic freeBSD issue
 CVE-2010-4815 (Coppermine gallery before 1.4.26 has an input validation 
vulnerability ...)
        NOT-FOR-US: Coppermine Photo Gallery
 CVE-2011-3169 (Unspecified vulnerability in the SMTP service implementation in 
HP TCP ...)
@@ -415428,11 +415428,11 @@ CVE-2010-4267 (Stack-based buffer overflow in the 
hpmud_get_pml function in io/h
        {DSA-2152-1}
        - hplip 3.10.6-2 (bug #610960)
 CVE-2010-4266 (It was found in vanilla forums before 2.0.10 a potential 
linkbait vuln ...)
-       TODO: check
+       NOT-FOR-US: Vanilla Forums
 CVE-2010-4265 (The 
org.jboss.remoting.transport.bisocket.BisocketServerInvoker$Second ...)
        - jbossas4 <not-affected> (Red Hat issue, they didn't include the fix 
for CVE-2010-3862 in the update)
 CVE-2010-4264 (It was found in vanilla forums before 2.0.10 a cross-site 
scripting vu ...)
-       TODO: check
+       NOT-FOR-US: Vanilla Forums
 CVE-2010-4263 (The igb_receive_skb function in drivers/net/igb/igb_main.c in 
the Inte ...)
        - linux-2.6 2.6.32-30
        [lenny] - linux-2.6 <not-affected> (Vulnerable code not present)
@@ -418017,7 +418017,7 @@ CVE-2010-3301 (The IA32 system call emulation 
functionality in arch/x86/ia32/ia3
        - linux-2.6 2.6.32-23
        [lenny] - linux-2.6 <not-affected> (vulnerability introduced in 2.6.27)
 CVE-2010-3300 (It was found that all OWASP ESAPI for Java up to version 2.0 
RC2 are v ...)
-       TODO: check
+       NOT-FOR-US: OWASP ESAPI
 CVE-2010-3299 (The encrypt/decrypt functions in Ruby on Rails 2.3 are 
vulnerable to p ...)
        - rails <unfixed> (unimportant)
        NOTE: http://seclists.org/oss-sec/2010/q3/415



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/03b09e873aba3a0893fa9b37fcb27bd6685f48f8

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/03b09e873aba3a0893fa9b37fcb27bd6685f48f8
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to