Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8b9b9ca6 by Moritz Muehlenhoff at 2025-04-18T12:43:04+02:00
auto-nfu: Add CNA rule for Github products
Scope: GitHub Enterprise Server issues only.
- - - - -
2 changed files:
- data/CVE/list
- data/packages/nfu.yaml
Changes:
=====================================
data/CVE/list
=====================================
@@ -20,11 +20,11 @@ CVE-2025-3598 (The Coupon Affiliates \u2013 Affiliate
Plugin for WooCommerce plu
CVE-2025-3520 (The Avatar plugin for WordPress is vulnerable to arbitrary file
deleti ...)
NOT-FOR-US: WordPress plugin
CVE-2025-3509 (A Remote Code Execution (RCE) vulnerability was identified in
GitHub E ...)
- TODO: check
+ NOT-FOR-US: Github Enterprise Server
CVE-2025-3246 (An improper neutralization of input vulnerability was
identified in Gi ...)
- TODO: check
+ NOT-FOR-US: Github Enterprise Server
CVE-2025-3124 (A missing authorization vulnerability was identified in GitHub
Enterpr ...)
- TODO: check
+ NOT-FOR-US: Github Enterprise Server
CVE-2025-39989 (In the Linux kernel, the following vulnerability has been
resolved: x ...)
- linux <unfixed>
[bullseye] - linux <not-affected> (Vulnerable code not present)
=====================================
data/packages/nfu.yaml
=====================================
@@ -45,6 +45,8 @@
cna: fortinet
- reason: Gallagher
cna: Gallagher
+- reason: Github Enterprise Server
+ cna: GitHub_P
- reason: Google devices
cna: Google_Devices
- reason: HCL
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8b9b9ca6d1b1fbc49d10a9c3b29ec78458b70777
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8b9b9ca6d1b1fbc49d10a9c3b29ec78458b70777
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
