Neil Williams pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
35bd5b59 by Neil Williams at 2022-09-02T11:00:38+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -36891,7 +36891,7 @@ CVE-2022-25304 (All versions of package opcua; all
versions of package asyncua a
CVE-2022-25303 (The package whoogle-search before 0.7.2 are vulnerable to
Cross-site S ...)
NOT-FOR-US: whoogle-search
CVE-2022-25302 (All versions of package asneg/opcuastack are vulnerable to
Denial of S ...)
- TODO: check
+ NOT-FOR-US: ASNeG/OpcUaStack
CVE-2022-25301 (All versions of package jsgui-lang-essentials are vulnerable
to Protot ...)
NOT-FOR-US: jsgui-lang-essentials
CVE-2022-25300
@@ -36935,7 +36935,7 @@ CVE-2022-24430
CVE-2022-24429 (The package convert-svg-core before 0.6.3 are vulnerable to
Arbitrary ...)
NOT-FOR-US: Node convert-svg-core
CVE-2022-24381 (All versions of package asneg/opcuastack are vulnerable to
Denial of S ...)
- TODO: check
+ NOT-FOR-US: ASNeG/OpcUaStack
CVE-2022-24377
RESERVED
CVE-2022-24376 (All versions of package git-promise are vulnerable to Command
Injectio ...)
@@ -36945,7 +36945,7 @@ CVE-2022-24375 (The package node-opcua before 2.74.0
are vulnerable to Denial of
CVE-2022-24373
RESERVED
CVE-2022-24298 (All versions of package freeopcua/freeopcua are vulnerable to
Denial o ...)
- TODO: check
+ NOT-FOR-US: FreeOpcUa/freeopcua
CVE-2022-24279 (The package madlib-object-utils before 0.1.8 are vulnerable to
Prototy ...)
NOT-FOR-US: madlib-object-utils
CVE-2022-24278 (The package convert-svg-core before 0.6.4 are vulnerable to
Directory ...)
@@ -44837,9 +44837,11 @@ CVE-2022-23462
CVE-2022-23461
RESERVED
CVE-2022-23460 (Jsonxx or Json++ is a JSON parser, writer and reader written
in C++. I ...)
- TODO: check
+ TODO: check - numerous jsonxx repositories exist on github
+ NOTE: https://github.com/advisories/GHSA-h8mv-q3c4-8hw2
CVE-2022-23459 (Jsonxx or Json++ is a JSON parser, writer and reader written
in C++. I ...)
- TODO: check
+ TODO: check - numerous jsonxx repositories exist on github
+ NOTE: https://github.com/advisories/GHSA-8662-6hf9-cr47
CVE-2022-23458
RESERVED
CVE-2022-23457 (ESAPI (The OWASP Enterprise Security API) is a free, open
source, web ...)
@@ -52859,7 +52861,7 @@ CVE-2022-21943
CVE-2022-21942
RESERVED
CVE-2022-21941 (All versions of iSTAR Ultra prior to version 6.8.9.CU01are
vulnerable ...)
- TODO: check
+ NOT-FOR-US: Sensormatic Electronics, LLC
CVE-2022-21940
RESERVED
CVE-2022-21939
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/35bd5b59da3caf4505fd1b6fda5e609051a1c979
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/35bd5b59da3caf4505fd1b6fda5e609051a1c979
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
