Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f5120698 by Moritz Muehlenhoff at 2025-09-09T13:24:28+02:00
mark two older Envoy issues as NFU
These are security issues in the way OpenShift uses Envoy, not in Envoy itself
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -71464,9 +71464,9 @@ CVE-2024-0135 (NVIDIA Container Toolkit contains an
improper isolation vulnerabi
CVE-2023-50316 (IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and
6.2.0.0 throug ...)
NOT-FOR-US: IBM
CVE-2025-0754 (The vulnerability was found in OpenShift Service Mesh 2.6.3 and
2.5.6. ...)
- - envoyproxy <itp> (bug #987544)
+ NOT-FOR-US: OpenShift Service Mesh
CVE-2025-0752 (A flaw was found in OpenShift Service Mesh 2.6.3 and 2.5.6.
Rate-limit ...)
- - envoyproxy <itp> (bug #987544)
+ NOT-FOR-US: OpenShift Service Mesh
CVE-2025-0750 (A vulnerability was found in CRI-O. A path traversal issue in
the log ...)
- cri-o <itp> (bug #979702)
CVE-2025-0736 (A flaw was found in Infinispan, when using JGroups with
JDBC_PING. Thi ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f5120698e9d7e282e64cdca1e46d59aab385ef00
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f5120698e9d7e282e64cdca1e46d59aab385ef00
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
