Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
9a266fe6 by security tracker role at 2025-07-30T08:12:59+00:00
automatic NOT-FOR-US entries update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -9,195 +9,195 @@ CVE-2025-8320 (Tesla Wall Connector Content-Length Header 
Improper Input Validat
 CVE-2025-8319 (the BMA login interface allows arbitrary JavaScript or HTML to 
be writ ...)
        TODO: check
 CVE-2025-8217 (The Amazon Q Developer Visual Studio Code (VS Code) extension 
v1.84.0  ...)
-       TODO: check
+       NOT-FOR-US: Amazon
 CVE-2025-7849 (A memory corruption vulnerability due to improper error 
handling when  ...)
-       TODO: check
+       NOT-FOR-US: National Instruments
 CVE-2025-7848 (A memory corruption vulnerability due to improper input 
validation in  ...)
-       TODO: check
+       NOT-FOR-US: National Instruments
 CVE-2025-7361 (A code injection vulnerability due to an improper 
initialization check ...)
-       TODO: check
+       NOT-FOR-US: National Instruments
 CVE-2025-54381 (BentoML is a Python library for building online serving 
systems optimi ...)
        TODO: check
 CVE-2025-54126 (The WebAssembly Micro Runtime's (WAMR) iwasm package is the 
executable ...)
        TODO: check
 CVE-2025-4426 (The vulnerability was identified in the code developed 
specifically fo ...)
-       TODO: check
+       NOT-FOR-US: Insyde
 CVE-2025-4425 (The vulnerability was identified in the code developed 
specifically fo ...)
-       TODO: check
+       NOT-FOR-US: Insyde
 CVE-2025-4424 (The vulnerability was identified in the code developed 
specifically fo ...)
-       TODO: check
+       NOT-FOR-US: Insyde
 CVE-2025-4423 (The vulnerability was identified in the code developed 
specifically fo ...)
-       TODO: check
+       NOT-FOR-US: Insyde
 CVE-2025-4422 (The vulnerability was identified in the code developed 
specifically fo ...)
-       TODO: check
+       NOT-FOR-US: Insyde
 CVE-2025-4421 (The vulnerability was identified in the code developed 
specifically fo ...)
-       TODO: check
+       NOT-FOR-US: Insyde
 CVE-2025-43277 (The issue was addressed with improved memory handling. This 
issue is f ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43276 (A logic error was addressed with improved error handling. This 
issue i ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43275 (A race condition was addressed with additional validation. 
This issue  ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43274 (A privacy issue was addressed by removing the vulnerable code. 
This is ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43273 (A permissions issue was addressed with additional sandbox 
restrictions ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43270 (An access issue was addressed with additional sandbox 
restrictions. Th ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43267 (An injection issue was addressed with improved validation. 
This issue  ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43266 (A permissions issue was addressed with additional 
restrictions. This i ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43265 (An out-of-bounds read was addressed with improved input 
validation. Th ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43261 (A logic issue was addressed with improved checks. This issue 
is fixed  ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43260 (This issue was addressed with improved data protection. This 
issue is  ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43259 (This issue was addressed with improved redaction of sensitive 
informat ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43256 (This issue was addressed through improved state management. 
This issue ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43254 (An out-of-bounds read was addressed with improved input 
validation. Th ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43253 (This issue was addressed with improved input validation. This 
issue is ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43252 (This issue was addressed by adding an additional prompt for 
user conse ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43251 (An authorization issue was addressed with improved state 
management. T ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43250 (A path handling issue was addressed with improved validation. 
This iss ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43249 (A logic issue was addressed with improved checks. This issue 
is fixed  ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43248 (A logic issue was addressed with improved restrictions. This 
issue is  ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43247 (A permissions issue was addressed with additional 
restrictions. This i ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43246 (This issue was addressed with improved checks. This issue is 
fixed in  ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43245 (A downgrade issue was addressed with additional code-signing 
restricti ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43244 (A race condition was addressed with improved state handling. 
This issu ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43243 (A permissions issue was addressed with additional 
restrictions. This i ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43241 (A permissions issue was addressed with additional 
restrictions. This i ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43240 (A logic issue was addressed with improved checks. This issue 
is fixed  ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43239 (An out-of-bounds access issue was addressed with improved 
bounds check ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43237 (An out-of-bounds write issue was addressed with improved 
bounds checki ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43235 (The issue was addressed with improved memory handling. This 
issue is f ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43234 (Multiple memory corruption issues were addressed with improved 
input v ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43233 (This issue was addressed with improved access restrictions. 
This issue ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43232 (A permissions issue was addressed with additional 
restrictions. This i ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43230 (The issue was addressed with additional permissions checks. 
This issue ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43229 (This issue was addressed through improved state management. 
This issue ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43228 (The issue was addressed with improved UI. This issue is fixed 
in iOS 1 ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43227 (This issue was addressed through improved state management. 
This issue ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43226 (An out-of-bounds read was addressed with improved input 
validation. Th ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43225 (A logging issue was addressed with improved data redaction. 
This issue ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43224 (An out-of-bounds access issue was addressed with improved 
bounds check ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43223 (A denial-of-service issue was addressed with improved input 
validation ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43222 (A use-after-free issue was addressed by removing the 
vulnerable code.  ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43221 (An out-of-bounds access issue was addressed with improved 
bounds check ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43220 (This issue was addressed with improved validation of symlinks. 
This is ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43218 (An out-of-bounds read was addressed with improved input 
validation. Th ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43217 (The issue was addressed by adding additional logic. This issue 
is fixe ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43216 (A use-after-free issue was addressed with improved memory 
management.  ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43215 (The issue was addressed with improved checks. This issue is 
fixed in m ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43214 (The issue was addressed with improved memory handling. This 
issue is f ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43213 (The issue was addressed with improved memory handling. This 
issue is f ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43212 (The issue was addressed with improved memory handling. This 
issue is f ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43211 (The issue was addressed with improved memory handling. This 
issue is f ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43209 (An out-of-bounds access issue was addressed with improved 
bounds check ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43206 (A parsing issue in the handling of directory paths was 
addressed with  ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43199 (A permissions issue was addressed by removing the vulnerable 
code. Thi ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43198 (This issue was addressed by removing the vulnerable code. This 
issue i ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43197 (This issue was addressed with additional entitlement checks. 
This issu ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43196 (A path handling issue was addressed with improved validation. 
This iss ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43195 (An issue existed in the handling of environment variables. 
This issue  ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43194 (The issue was addressed with improved checks. This issue is 
fixed in m ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43193 (The issue was addressed with improved memory handling. This 
issue is f ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43192 (A configuration issue was addressed with additional 
restrictions. This ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43191 (A path handling issue was addressed with improved validation. 
This iss ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43189 (This issue was addressed with improved memory handling. This 
issue is  ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43188 (A permissions issue was addressed with additional 
restrictions. This i ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43186 (The issue was addressed with improved memory handling. This 
issue is f ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43185 (A downgrade issue was addressed with additional code-signing 
restricti ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-43184 (This issue was addressed by adding an additional prompt for 
user conse ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-40600 (Use of Externally-Controlled Format String vulnerability in 
the SonicO ...)
-       TODO: check
+       NOT-FOR-US: SonicWall
 CVE-2025-31281 (An input validation issue was addressed with improved memory 
handling. ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-31280 (A memory corruption issue was addressed with improved 
validation. This ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-31279 (A permissions issue was addressed with additional 
restrictions. This i ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-31278 (The issue was addressed with improved memory handling. This 
issue is f ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-31277 (The issue was addressed with improved memory handling. This 
issue is f ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-31276 (This issue was addressed through improved state management. 
This issue ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-31275 (A permissions issue was addressed with additional 
restrictions. This i ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-31273 (The issue was addressed with improved memory handling. This 
issue is f ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-31243 (A permissions issue was addressed with additional 
restrictions. This i ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-31229 (A logic issue was addressed with improved checks. This issue 
is fixed  ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-25011 (An uncontrolled search path element vulnerability can lead to 
local pr ...)
        TODO: check
 CVE-2025-24224 (The issue was addressed with improved checks. This issue is 
fixed in t ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-24188 (A logic issue was addressed with improved checks. This issue 
is fixed  ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-24119 (This issue was addressed through improved state management. 
This issue ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2025-0712 (An uncontrolled search path element vulnerability can lead to 
local pr ...)
        TODO: check
 CVE-2025-7777



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9a266fe6cfd384725e2f9ba41e482907f3bec484

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9a266fe6cfd384725e2f9ba41e482907f3bec484
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to