Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f1d63fb2 by Moritz Muehlenhoff at 2023-09-20T08:48:01+02:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -21,15 +21,15 @@ CVE-2023-42451 (Mastodon is a free, open-source social
network server based on A
CVE-2023-42450 (Mastodon is a free, open-source social network server based on
Activit ...)
- mastodon <itp> (bug #859741)
CVE-2023-42447 (blurhash-rs is a pure Rust implementation of Blurhash,
software for en ...)
- TODO: check
+ NOT-FOR-US: Rust crate blurhash
CVE-2023-42444 (phonenumber is a library for parsing, formatting and
validating intern ...)
- TODO: check
+ NOT-FOR-US: Rust crate phonenumber
CVE-2023-41890 (Sustainsys.Saml2 library adds SAML2P support to ASP.NET web
sites, all ...)
- TODO: check
+ NOT-FOR-US: Sustainsys.Saml2
CVE-2023-41834 (Improper Neutralization of CRLF Sequences in HTTP Headers in
Apache Fl ...)
- TODO: check
+ NOT-FOR-US: Apache Flink
CVE-2023-41387 (A SQL injection in the flutter_downloader component through
1.11.1 for ...)
- TODO: check
+ NOT-FOR-US: flutter_downloader
CVE-2023-41179 (A vulnerability in the 3rd party AV uninstaller module
contained in Tr ...)
NOT-FOR-US: Trend Micro
CVE-2023-3892 (Improper Restriction of XML External Entity Reference
vulnerability in ...)
@@ -53,13 +53,13 @@ CVE-2023-32186 (A Allocation of Resources Without Limits or
Throttling vulnerabi
CVE-2023-32182 (A Improper Link Resolution Before File Access ('Link
Following') vulne ...)
TODO: check
CVE-2023-31808 (Technicolor TG670 10.5.N.9 devices contain multiple accounts
with hard ...)
- TODO: check
+ NOT-FOR-US: Technicolor
CVE-2023-2995 (The Leyka WordPress plugin through 3.30.3 does not sanitise and
escape ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2023-2567 (A SQL Injection vulnerability in Nozomi Networks Guardian and
CMC, due ...)
- TODO: check
+ NOT-FOR-US: Nozomi Networks Guardian and CMC
CVE-2023-29245 (A SQL Injection vulnerability in Nozomi Networks Guardian and
CMC, due ...)
- TODO: check
+ NOT-FOR-US: Nozomi Networks Guardian and CMC
CVE-2023-4998
- gitlab <unfixed>
CVE-2023-5060 (Cross-site Scripting (XSS) - DOM in GitHub repository
librenms/librenm ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f1d63fb280256cde637ef56430ae68f84f4d1c55
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f1d63fb280256cde637ef56430ae68f84f4d1c55
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
