[Git][security-tracker-team/security-tracker][master] mark two older Envoy issues as NFU

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f5120698 by Moritz Muehlenhoff at 2025-09-09T13:24:28+02:00
mark two older Envoy issues as NFU

These are security issues in the way OpenShift uses Envoy, not in Envoy itself

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -71464,9 +71464,9 @@ CVE-2024-0135 (NVIDIA Container Toolkit contains an improper isolation vulnerabi
 CVE-2023-50316 (IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 throug ...)
 	NOT-FOR-US: IBM
 CVE-2025-0754 (The vulnerability was found in OpenShift Service Mesh 2.6.3 and 2.5.6. ...)
-	- envoyproxy <itp> (bug #987544)
+	NOT-FOR-US: OpenShift Service Mesh
 CVE-2025-0752 (A flaw was found in OpenShift Service Mesh 2.6.3 and 2.5.6. Rate-limit ...)
-	- envoyproxy <itp> (bug #987544)
+	NOT-FOR-US: OpenShift Service Mesh
 CVE-2025-0750 (A vulnerability was found in CRI-O. A path traversal issue in the log  ...)
 	- cri-o <itp> (bug #979702)
 CVE-2025-0736 (A flaw was found in Infinispan, when using JGroups with JDBC_PING. Thi ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f5120698e9d7e282e64cdca1e46d59aab385ef00

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f5120698e9d7e282e64cdca1e46d59aab385ef00
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250909/ffe582fe/attachment.htm>