[Git][security-tracker-team/security-tracker][master] auto-nfu: Add Microsoft

Moritz Muehlenhoff (@jmm) jmm at debian.org
Thu Apr 16 12:40:18 BST 2026



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
666eba67 by Moritz Muehlenhoff at 2026-04-16T13:39:59+02:00
auto-nfu: Add Microsoft

Stop tracking Microsoft based on products and filter out the CNA at large.
nuget has been removed from the archive and otherwise don't include any
Microsoft software.

Scope:
Microsoft issues only, excluding end-of-life (EOL) as listed in the
Microsoft Lifecycle Policy.

- - - - -


2 changed files:

- data/CVE/list
- data/packages/nfu.yaml


Changes:

=====================================
data/CVE/list
=====================================
Binary files a/data/CVE/list and b/data/CVE/list differ


=====================================
data/packages/nfu.yaml
=====================================
@@ -159,6 +159,8 @@
   cna: MediaTek
 - reason: Microchip
   cna: Microchip
+- reason: Microsoft
+  cna: microsoft
 - reason: Mitsubishi
   cna: Mitsubishi
 - reason: M-Files
@@ -640,29 +642,6 @@
     - cna: Meta
     - anyOf:
       - product: proxygen
-- reason: Microsoft
-  allOf:
-    - cna: microsoft
-    - anyOf:
-      - product: Azure Automation
-      - product: Azure DevOps
-      - product: Azure Monitor
-      - product: Azure Storage Resource Provider (SRP)
-      - product: Microsoft 365 Apps for Enterprise
-      - product: Microsoft 365 Copilot
-      - product: Microsoft Configuration Manager
-      - product: Microsoft Dataverse
-      - product: Microsoft Edge (Chromium-based)
-      - product: Microsoft Edge (Chromium-based) Updater
-      - product: Microsoft Edge for iOS
-      - product: Microsoft Partner Center
-      - product: Microsoft PC Manager
-      - product: Microsoft Teams for Desktop
-      - product: Microsoft Teams for Mac
-      - product: Nuance Digital Engagement Platform
-      - product: Power Automate for Desktop
-      - product: Python extension for Visual Studio Code
-      - product: Service Fabric
 - reason: Open X-Change
   allOf:
     - cna: OX



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/666eba67754dd34395c2b71484820e4024888e8d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/666eba67754dd34395c2b71484820e4024888e8d
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260416/d713fea6/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list