Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a635a476 by Salvatore Bonaccorso at 2022-02-08T21:19:11+01:00
Process NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -517,7 +517,7 @@ CVE-2022-24452
CVE-2022-24451
RESERVED
CVE-2022-24450 (NATS nats-server before 2.7.2 has Incorrect Access Control.
Any authen ...)
- TODO: check
+ NOT-FOR-US: nats-server
CVE-2022-24449
RESERVED
CVE-2022-24448 (An issue was discovered in fs/nfs/dir.c in the Linux kernel
before 5.1 ...)
@@ -594,19 +594,19 @@ CVE-2022-0511
- firefox <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2022-04/#CVE-2022-0511
CVE-2022-0510 (Cross-site Scripting (XSS) - Reflected in Packagist
pimcore/pimcore pr ...)
- TODO: check
+ NOT-FOR-US: pimcore
CVE-2022-0509 (Cross-site Scripting (XSS) - Stored in Packagist
pimcore/pimcore prior ...)
- TODO: check
+ NOT-FOR-US: pimcore
CVE-2022-0508 (Server-Side Request Forgery (SSRF) in NPM @peertube/embed-api
prior to ...)
TODO: check
CVE-2022-0507
RESERVED
CVE-2022-0506 (Cross-site Scripting (XSS) - Stored in Packagist
microweber/microweber ...)
- TODO: check
+ NOT-FOR-US: microweber
CVE-2022-0505 (Cross-Site Request Forgery (CSRF) in Packagist
microweber/microweber p ...)
- TODO: check
+ NOT-FOR-US: microweber
CVE-2022-0504 (Generation of Error Message Containing Sensitive Information in
Packag ...)
- TODO: check
+ NOT-FOR-US: microweber
CVE-2022-0503
RESERVED
CVE-2022-0502 (Cross-site Scripting (XSS) - Stored in Packagist
remdex/livehelperchat ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a635a476d55b47751c9068297c12e225e481da43
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a635a476d55b47751c9068297c12e225e481da43
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
