[Git][security-tracker-team/security-tracker][master] 2 commits: auto-nfu: Add rule for Eclipse

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
28700af8 by Moritz Muehlenhoff at 2025-03-13T09:12:40+01:00
auto-nfu: Add rule for Eclipse

Needs product-based matching, Jetty is also covered by the CNA.

- - - - -
fbed7b3d by Moritz Muehlenhoff at 2025-03-13T09:12:42+01:00
NFU

- - - - -


2 changed files:

- data/CVE/list
- data/packages/nfu.yaml


Changes:

=====================================
data/CVE/list
=====================================
@@ -168,7 +168,7 @@ CVE-2024-13446 (The Workreap plugin for WordPress is vulnerable to privilege esc
 CVE-2024-13430 (The Page Builder: Pagelayer \u2013 Drag and Drop website builder plugi ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2024-10838 (An integer underflow during deserialization may allow any unauthentica ...)
-	TODO: check
+	NOT-FOR-US: Eclipse
 CVE-2025-27867 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: Apache Felix Webconsole
 CVE-2025-29891 (Bypass/Injection vulnerability in Apache Camel.  This issue affects Ap ...)


=====================================
data/packages/nfu.yaml
=====================================
@@ -86,6 +86,11 @@
     - cna: cisco
     - anyOf:
       - product: IOS
+- reason: Eclipse
+  allOf:
+    - cna: eclipse
+    - anyOf:
+      - product: Eclipse Cyclone DDS
 - reason: Esri
   allOf:
     - cna: Esri



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/4af30de3b7566354dfd04e7f548870db50131382...fbed7b3d75ce1b76f2adb4f8c42b53699f5f23bf

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/4af30de3b7566354dfd04e7f548870db50131382...fbed7b3d75ce1b76f2adb4f8c42b53699f5f23bf
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250313/22e57ad4/attachment-0001.htm>