From f7db08ad1ece74f820deea1d5f6b2c56e9a9324a Mon Sep 17 00:00:00 2001
From: Neil Williams <codehelp@debian.org>
Date: Wed, 26 Jan 2022 11:03:12 +0000
Subject: Process some NFUs

---
 data/CVE/2021.list | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/data/CVE/2021.list b/data/CVE/2021.list
index 8666d093b5..212f50b211 100644
--- a/data/CVE/2021.list
+++ b/data/CVE/2021.list
@@ -40026,7 +40026,7 @@ CVE-2021-30362
 CVE-2021-30361
 	RESERVED
 CVE-2021-30360 (Users have access to the directory where the installation repair occur ...)
-	TODO: check
+	NOT-FOR-US: Check Point
 CVE-2021-30359 (The Harmony Browse and the SandBlast Agent for Browsers installers mus ...)
 	NOT-FOR-US: Harmony Browse and the SandBlast Agent for Browsers installers
 CVE-2021-30358 (Mobile Access Portal Native Applications who's path is defined by the  ...)
@@ -40050,7 +40050,7 @@ CVE-2021-30350
 CVE-2021-30349
 	RESERVED
 CVE-2021-30348 (Improper validation of LLM utility timers availability can lead to den ...)
-	TODO: check
+	NOT-FOR-US: Qualcomm
 CVE-2021-30347
 	RESERVED
 CVE-2021-30346
@@ -40086,7 +40086,7 @@ CVE-2021-30332
 CVE-2021-30331
 	RESERVED
 CVE-2021-30330 (Possible null pointer dereference due to improper validation of APE cl ...)
-	TODO: check
+	NOT-FOR-US: Qualcomm
 CVE-2021-30329
 	RESERVED
 CVE-2021-30328
@@ -40120,7 +40120,7 @@ CVE-2021-30315 (Improper handling of sensor HAL structure in absence of sensor c
 CVE-2021-30314 (Lack of validation for third party application accessing the service c ...)
 	NOT-FOR-US: Qualcomm
 CVE-2021-30313 (Use after free condition can occur in wired connectivity due to a race ...)
-	TODO: check
+	NOT-FOR-US: Qualcomm
 CVE-2021-30312 (Improper authentication of sub-frames of a multicast AMSDU frame can l ...)
 	NOT-FOR-US: Qualcomm components for Android
 CVE-2021-30311 (Possible heap overflow due to lack of index validation before allocati ...)
@@ -41857,7 +41857,7 @@ CVE-2021-29634
 CVE-2021-29633
 	RESERVED
 CVE-2021-29632 (In FreeBSD 13.0-STABLE before n247428-9352de39c3dc, 12.2-STABLE before ...)
-	TODO: check
+	NOT-FOR-US: FreeBSD
 CVE-2021-29631 (In FreeBSD 13.0-STABLE before n246941-20f96f215562, 12.2-STABLE before ...)
 	NOT-FOR-US: FreeBSD
 CVE-2021-29630 (In FreeBSD 13.0-STABLE before n246938-0729ba2f49c9, 12.2-STABLE before ...)
@@ -44251,7 +44251,7 @@ CVE-2021-28682 (An issue was discovered in Envoy through 1.71.1. There is a remo
 CVE-2021-28681 (Pion WebRTC before 3.0.15 didn't properly tear down the DTLS Connectio ...)
 	NOT-FOR-US: Pion WebRTC
 CVE-2021-28680 (The devise_masquerade gem before 1.3 allows certain attacks when a pas ...)
-	TODO: check
+	NOT-FOR-US: devise_masquerade
 CVE-2021-28679
 	RESERVED
 CVE-2021-28678 (An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImage ...)
@@ -48857,7 +48857,7 @@ CVE-2021-26709 (** UNSUPPORTED WHEN ASSIGNED ** D-Link DSL-320B-D1 devices throu
 CVE-2021-26707 (The merge-deep library before 3.0.3 for Node.js can be tricked into ov ...)
 	NOT-FOR-US: Node deep-merge
 CVE-2021-26706 (An issue was discovered in lib_mem.c in Micrium uC/OS uC/LIB 1.38.x an ...)
-	TODO: check
+	NOT-FOR-US: Micrium
 CVE-2021-26705 (An issue was discovered in SquareBox CatDV Server through 9.2. An atta ...)
 	NOT-FOR-US: SquareBox CatDV Server
 CVE-2021-26704 (EPrints 3.4.2 allows remote attackers to execute arbitrary commands vi ...)
@@ -49736,7 +49736,7 @@ CVE-2021-26342
 CVE-2021-26341
 	RESERVED
 CVE-2021-26340 (A malicious hypervisor in conjunction with an unprivileged attacker pr ...)
-	TODO: check
+	NOT-FOR-US: AMD
 CVE-2021-26339
 	RESERVED
 CVE-2021-26338 (Improper access controls in System Management Unit (SMU) may allow for ...)
-- 
cgit v1.2.3