[Git][security-tracker-team/security-tracker][master] auto-nfu: Add rule for Free5GC

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2174ad5b by Moritz Muehlenhoff at 2026-08-27T23:15:07+02:00
auto-nfu: Add rule for Free5GC

- - - - -


2 changed files:

- data/CVE/list
- data/packages/nfu.yaml


Changes:

=====================================
data/CVE/list
=====================================
@@ -320,39 +320,39 @@ CVE-2026-32550 (Subscriber SQL Injection in Kadence Shop Kit <= 3.0.6 versions.)
 CVE-2026-32479 (Unauthenticated SQL Injection in Visitor Traffic Real Time Statistics  ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-30073 (An issue in the NssaiAvailabilitySubscriptionCreate component of free5 ...)
-	TODO: check
+	NOT-FOR-US: Free5GC
 CVE-2026-30072 (A NULL pointer dereference in the CDR processing path of free5gc v4.0. ...)
-	TODO: check
+	NOT-FOR-US: Free5GC
 CVE-2026-30071 (An issue in the RechargePut function of free5gc v4.0.1 allows attacker ...)
-	TODO: check
+	NOT-FOR-US: Free5GC
 CVE-2026-30070 (An issue in the HandleGetSharedData function of free5gc v4.0.1 allows  ...)
-	TODO: check
+	NOT-FOR-US: Free5GC
 CVE-2026-30069 (A NULL pointer dereference in the UDMC registration handler component  ...)
-	TODO: check
+	NOT-FOR-US: Free5GC
 CVE-2026-30068 (Improper input validation in the HandleUpdate function (/sbi/parameter ...)
-	TODO: check
+	NOT-FOR-US: Free5GC
 CVE-2026-30067 (An issue in the complexQueryFilterSubprocess function in the NRF Disco ...)
-	TODO: check
+	NOT-FOR-US: Free5GC
 CVE-2026-30064 (Improper input validation in the buildFilter function (processor/proce ...)
-	TODO: check
+	NOT-FOR-US: Free5GC
 CVE-2026-30063 (An issue in the NF Discovery endpoint of free5gc v4.0.1 allows attacke ...)
-	TODO: check
+	NOT-FOR-US: Free5GC
 CVE-2026-30062 (An issue in the NGAP handler of free5gc v4.0.1 allows attackers to cau ...)
-	TODO: check
+	NOT-FOR-US: Free5GC
 CVE-2026-30060 (An issue in free5gc v4.0.1 allows attackers to cause a Denial of Servi ...)
-	TODO: check
+	NOT-FOR-US: Free5GC
 CVE-2026-30059 (An issue in the NAS decoder component of free5gc v4.0.1 allows attacke ...)
-	TODO: check
+	NOT-FOR-US: Free5GC
 CVE-2026-30058 (Improper Input Validation in the HTTPModifySubscription handler of fre ...)
-	TODO: check
+	NOT-FOR-US: Free5GC
 CVE-2026-30057 (An issue in the CreateUEContext handler component of free5gc v4.1.0 al ...)
-	TODO: check
+	NOT-FOR-US: Free5GC
 CVE-2026-30056 (A NULL pointer dereference in the AMF NGAP Dispatcher component of fre ...)
-	TODO: check
+	NOT-FOR-US: Free5GC
 CVE-2026-30051 (An issue in the CreateUEContextProcedure function (/v1/ue-contexts/{su ...)
-	TODO: check
+	NOT-FOR-US: Free5GC
 CVE-2026-30050 (An issue in the ModifyAMFEventSubscriptionProcedure function (processo ...)
-	TODO: check
+	NOT-FOR-US: Free5GC
 CVE-2026-30047 (A reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-cont ...)
 	TODO: check
 CVE-2026-30046 (A reachable assertion vulnerability in the NUDM-UECM interface of Open ...)


=====================================
data/packages/nfu.yaml
=====================================
@@ -1005,6 +1005,8 @@
   description: '.*\bEmlog\b.*'
 - reason: ESAFENET
   description: '.*\bESAFENET\b.*'
+- reason: Free5GC
+  description: '.*\bfree5gc\b.*'
 - reason: Flowise
   description: '.*\bFlowise\b.*'
 - reason: Intelbras



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2174ad5bcda898bee63f7bd1518017a43954e878

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2174ad5bcda898bee63f7bd1518017a43954e878
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260827/217d30df/attachment-0001.htm>