Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
76a52434 by Moritz Muehlenhoff at 2026-08-12T20:32:01+02:00
auto-nfu: Add rule for rapid7 CNA
- - - - -
2 changed files:
- data/CVE/list
- data/packages/nfu.yaml
Changes:
=====================================
data/CVE/list
=====================================
@@ -974,7 +974,7 @@ CVE-2026-69306 (Not failing securely ('failing open') in
Visual Studio Code allo
CVE-2026-69278 (Incorrect authorization in Visual Studio Code allows an
unauthorized a ...)
NOT-FOR-US: Microsoft
CVE-2026-69223 (Apache Allura's webhooks are vulnerable toServer-Side Request
Forgery ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-69119 (Taubyte Tau v1.1.10 contains a missing authorization
vulnerability in ...)
TODO: check
CVE-2026-69117 (NetBox 4.5.8 contains an ORM injection vulnerability that
allows authe ...)
=====================================
data/packages/nfu.yaml
=====================================
@@ -839,6 +839,11 @@
- anyOf:
- product: Delphix
- product: Helix Core Server (P4D)
+- reason: Rapid7
+ allOf:
+ - cna: rapid7
+ - anyOf:
+ - product: Velociraptor
- reason: Samsung
allOf:
- cna: samsung.tv_appliance
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/76a524349e9d90c31b0457f5c53b4baeba0e512c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/76a524349e9d90c31b0457f5c53b4baeba0e512c
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
