Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
acccd875 by Moritz Muehlenhoff at 2026-05-31T22:57:42+02:00
auto-nfu: Extend Apache rule
- - - - -
2 changed files:
- data/CVE/list
- data/packages/nfu.yaml
Changes:
=====================================
data/CVE/list
=====================================
@@ -1809,7 +1809,7 @@ CVE-2026-41160 (EspoCRM is an open source customer
relationship management appli
CVE-2026-41141 (EspoCRM is an open source customer relationship management
application ...)
NOT-FOR-US: EspoCRM
CVE-2026-40914 (A vulnerability exists in Apache Artemis whereby an
application using ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-38707 (A command injection vulnerability exists in the IPSec VPN
feature of I ...)
NOT-FOR-US: InHand
CVE-2026-38704 (A command injection vulnerability exists in the WireGuard VPN
feature ...)
@@ -1839,7 +1839,7 @@ CVE-2026-30760 (An issue in SourceBans Material Admin
before v.1.1.6 (3ecd95e) a
CVE-2026-24444 (SDMC NE6037 cable modem routers running firmware 7.1.6.0.25
and 7.1.6. ...)
NOT-FOR-US: SDMC NE6037 cable modem routers
CVE-2025-48977 (Relative Path Traversal vulnerability in Apache Ignite REST
API. Auth ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2024-47097 (Cross Site Scripting vulnerability in Follet School Solutions
Destiny ...)
NOT-FOR-US: Follet School Solutions Destiny
CVE-2024-47096 (Cross Site Scripting vulnerability in Follet School Solutions
Destiny ...)
=====================================
data/packages/nfu.yaml
=====================================
@@ -315,8 +315,10 @@
- anyOf:
- product: Apache APISIX
- product: Apache ActiveMQ Artemis
+ - product: Apache ActiveMQ Artemis Stomp Protocol
- product: Apache Answer
- product: Apache Artemis
+ - product: Apache Artemis Stomp Protocol
- product: Apache Avro Java SDK
- product: Apache Atlas
- product: Apache CXF
@@ -340,6 +342,7 @@
- product: Apache HertzBeat (incubating)
- product: Apache Hive
- product: Apache HugeGraph-Server
+ - product: Apache Ignite
- product: Apache IoTDB
- product: Apache Kvrocks
- product: Apache Kylin
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/acccd8756c3ab742cd25fd3b7686fd3839297b74
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/acccd8756c3ab742cd25fd3b7686fd3839297b74
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
