[Git][security-tracker-team/security-tracker][master] auto-nfu: Add Drupal to CNA list

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
62f29361 by Moritz Muehlenhoff at 2025-04-01T10:25:01+02:00
auto-nfu: Add Drupal to CNA list

The scope is "All projects hosted under drupal.org, including End of Life (EOL) code."

Historically Drupal used to be in the archive, but the last release to do
is was Buster and Drupal 8 is deemed unpackageable
(https://gwolf.org/2016/12/giving-up-on-the-drupal-8-debianization.html),
as such we can treat as NFU for all new, incoming CVE IDs.

- - - - -


1 changed file:

- data/packages/nfu.yaml


Changes:

=====================================
data/packages/nfu.yaml
=====================================
@@ -35,6 +35,8 @@
   cna: dell
 - reason: Devolutions
   cna: DEVOLUTIONS
+- reason: Drupal core and addons
+  cna: drupal
 - reason: Fortinet
   cna: fortinet
 - reason: Gallagher



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/62f29361438e956f93c37486c4e97af53b806498

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/62f29361438e956f93c37486c4e97af53b806498
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250401/69175a08/attachment.htm>