Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
1d807ee6 by Salvatore Bonaccorso at 2026-07-15T11:19:57+02:00
auto-nfu: Narrow down scope for GitLab CNA rule
GitLab CNA apparently still assigns CVEs e.g. for wireshark. Narrow down
the socpe for now to only cover product 'GitLab' for the NFU rule where
we exceptionally track GitLab now as NFU.
- - - - -
1 changed file:
- data/packages/nfu.yaml
Changes:
=====================================
data/packages/nfu.yaml
=====================================
@@ -119,8 +119,6 @@
cna: Genetec
- reason: Github Enterprise Server
cna: GitHub_P
-- reason: GitLab (used to be packaged in the Debian archive as src:gitlab, but
never in a stable release)
- cna: GitLab
- reason: Google devices
cna: Google_Devices
- reason: Hanwha Vision
@@ -506,6 +504,11 @@
- anyOf:
- product: GoAnywhere MFT
- product: GoAnywhere
+- reason: GitLab (used to be packaged in the Debian archive as src:gitlab, but
never in a stable release)
+ allOf:
+ - cna: GitLab
+ - anyOf:
+ - product: GitLab
- reason: Google products not packaged in Debian
allOf:
- cna: Google
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1d807ee6c9842b37484711b214e69e59bc28fbc9
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1d807ee6c9842b37484711b214e69e59bc28fbc9
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
