Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
28700af8 by Moritz Muehlenhoff at 2025-03-13T09:12:40+01:00
auto-nfu: Add rule for Eclipse
Needs product-based matching, Jetty is also covered by the CNA.
- - - - -
fbed7b3d by Moritz Muehlenhoff at 2025-03-13T09:12:42+01:00
NFU
- - - - -
2 changed files:
- data/CVE/list
- data/packages/nfu.yaml
Changes:
=====================================
data/CVE/list
=====================================
@@ -168,7 +168,7 @@ CVE-2024-13446 (The Workreap plugin for WordPress is
vulnerable to privilege esc
CVE-2024-13430 (The Page Builder: Pagelayer \u2013 Drag and Drop website
builder plugi ...)
NOT-FOR-US: WordPress plugin
CVE-2024-10838 (An integer underflow during deserialization may allow any
unauthentica ...)
- TODO: check
+ NOT-FOR-US: Eclipse
CVE-2025-27867 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
NOT-FOR-US: Apache Felix Webconsole
CVE-2025-29891 (Bypass/Injection vulnerability in Apache Camel. This issue
affects Ap ...)
=====================================
data/packages/nfu.yaml
=====================================
@@ -86,6 +86,11 @@
- cna: cisco
- anyOf:
- product: IOS
+- reason: Eclipse
+ allOf:
+ - cna: eclipse
+ - anyOf:
+ - product: Eclipse Cyclone DDS
- reason: Esri
allOf:
- cna: Esri
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/4af30de3b7566354dfd04e7f548870db50131382...fbed7b3d75ce1b76f2adb4f8c42b53699f5f23bf
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/4af30de3b7566354dfd04e7f548870db50131382...fbed7b3d75ce1b76f2adb4f8c42b53699f5f23bf
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
