Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
2a8a2ef5 by Salvatore Bonaccorso at 2018-02-09T10:43:16+01:00
Process NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -64428,7 +64428,7 @@ CVE-2017-1787
 CVE-2017-1786
        RESERVED
 CVE-2017-1785 (IBM API Connect 5.0.7 and 5.0.8 could allow an authenticated 
remote ...)
-       TODO: check
+       NOT-FOR-US: IBM API Connect
 CVE-2017-1784 (IBM Cognos Analytics 11.0 could produce results in temporary 
files ...)
        NOT-FOR-US: IBM Cognos Analytics
 CVE-2017-1783 (IBM Cognos Analytics 11.0 could allow a local user to change 
...)
@@ -64614,7 +64614,7 @@ CVE-2017-1694 (IBM Integration Bus 9.0 and 10.0 
transmits user credentials in pl
 CVE-2017-1693 (IBM Integration Bus 9.0 and 10.0 could allow an attacker that 
has ...)
        NOT-FOR-US: IBM Integration Bus
 CVE-2017-1692 (IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified 
vulnerability ...)
-       TODO: check
+       NOT-FOR-US: IBM AIX
 CVE-2017-1691
        RESERVED
 CVE-2017-1690
@@ -79856,9 +79856,9 @@ CVE-2016-6175 (Eval injection vulnerability in 
php-gettext 1.0.12 and earlier al
 CVE-2016-6174 (applications/core/modules/front/system/content.php in Invision 
Power ...)
        NOT-FOR-US: Inivision
 CVE-2016-6169 (Heap-based buffer overflow in Foxit Reader and PhantomPDF 
7.3.4.311 ...)
-       TODO: check
+       NOT-FOR-US: Foxit Reader
 CVE-2016-6168 (Use-after-free vulnerability in Foxit Reader and PhantomPDF 
7.3.4.311 ...)
-       TODO: check
+       NOT-FOR-US: Foxit Reader
 CVE-2016-6167 (Multiple untrusted search path vulnerabilities in Putty beta 
0.67 ...)
        - putty <not-affected> (Windows-specific)
 CVE-2016-6166
@@ -117790,7 +117790,7 @@ CVE-2015-2749 (Open redirect vulnerability in Drupal 
6.x before 6.35 and 7.x bef
        NOTE: https://www.drupal.org/SA-CORE-2015-001
        NOTE: http://www.openwall.com/lists/oss-security/2015/03/19/5
 CVE-2015-2329 (Cross-site scripting (XSS) vulnerability in the WooCommerce 
plugin ...)
-       TODO: check
+       NOT-FOR-US: WooCommerce plugin for WordPress
 CVE-2015-2328 (PCRE before 8.36 mishandles the /((?(R)a|(?1)))+/ pattern and 
related ...)
        - mongodb <unfixed> (unimportant)
        NOTE: CVE for bundled version of pcre3 in mongodb
@@ -178851,7 +178851,7 @@ CVE-2012-3333 (CRLF injection vulnerability in IBM 
Maximo Asset Management 7.x b
 CVE-2012-3332
        RESERVED
 CVE-2012-3331 (IBM Sametime allows remote attackers to obtain sensitive 
information ...)
-       TODO: check
+       NOT-FOR-US: IBM Sametime
 CVE-2012-3330 (The proxy server in IBM WebSphere Application Server 7.0 before 
...)
        NOT-FOR-US: IBM WebSphere Application Server
 CVE-2012-3329 (IBM Advanced Settings Utility (ASU) through 3.62 and 3.70 
through 9.21 ...)
@@ -181793,7 +181793,7 @@ CVE-2012-2168 (IBM Rational ClearQuest 7.1.x before 
7.1.2.7 and 8.x before 8.0.0
 CVE-2012-2167 (The IBM XIV Storage System Gen3 before 11.1.0.a allows remote 
...)
        NOT-FOR-US: IBM XIV Storage System Gen3
 CVE-2012-2166 (IBM XIV Storage System 2810-A14 and 2812-A14 devices before 
level ...)
-       TODO: check
+       NOT-FOR-US: IBM XIV Storage System
 CVE-2012-2165 (IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 
8.0.0.3, ...)
        NOT-FOR-US: IBM Rational ClearQuest
 CVE-2012-2164 (The Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 
and 8.x ...)
@@ -187210,7 +187210,7 @@ CVE-2011-4891
 CVE-2011-4890 (The server in IBM solidDB 6.5 before FP9 and 7.0 before FP1 
allows ...)
        NOT-FOR-US: IBM solidDB
 CVE-2011-4889 (The javax.naming.directory.AttributeInUseException class in the 
...)
-       TODO: check
+       NOT-FOR-US: IBM WebSphere Application Server
 CVE-2011-4888
        RESERVED
 CVE-2011-4887 (Cross-site scripting (XSS) vulnerability in the Violations 
Table in ...)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/commit/2a8a2ef5c906b638d208a64aa168e0d037bd9dc3

---
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/commit/2a8a2ef5c906b638d208a64aa168e0d037bd9dc3
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

Reply via email to