[Git][security-tracker-team/security-tracker][master] 2 commits: auto-nfu: Catch more Free5GC cases for NFU

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
966da214 by Salvatore Bonaccorso at 2026-08-29T10:01:18+02:00
auto-nfu: Catch more Free5GC cases for NFU

- - - - -
296a7b16 by Salvatore Bonaccorso at 2026-08-29T10:01:48+02:00
Process some NFUs

- - - - -


2 changed files:

- data/CVE/list
- data/packages/nfu.yaml


Changes:

=====================================
data/CVE/list
=====================================
@@ -211,9 +211,9 @@ CVE-2026-55841 (Graylog is a free and open log management platform. Prior to Gra
 CVE-2026-55834 (Pocket ID is an OIDC provider that allows users to authenticate with t ...)
 	TODO: check
 CVE-2026-55785 (free5GC is an open-source implementation of the 5G core network. Prior ...)
-	TODO: check
+	NOT-FOR-US: Free5GC
 CVE-2026-55784 (free5GC is an open-source implementation of the 5G core network. In ve ...)
-	TODO: check
+	NOT-FOR-US: Free5GC
 CVE-2026-55779 (Silverstripe Versioned provides versioning for Silverstripe models. Pr ...)
 	TODO: check
 CVE-2026-55764 (Klever-Go is the Go implementation of the Klever blockchain protocol.  ...)
@@ -273,7 +273,7 @@ CVE-2026-55215 (MariaDB Connector/Node.js is used to connect applications develo
 CVE-2026-55108 (KubeVela is an open source application delivery platform. Prior to 1.9 ...)
 	TODO: check
 CVE-2026-55068 (free5GC is an open-source implementation of the 5G core network. In 4. ...)
-	TODO: check
+	NOT-FOR-US: Free5GC
 CVE-2026-55067 (Vikunja is an open-source self-hosted task management platform. Prior  ...)
 	TODO: check
 CVE-2026-55066 (Vikunja is an open-source self-hosted task management platform. Prior  ...)


=====================================
data/packages/nfu.yaml
=====================================
@@ -1007,7 +1007,7 @@
 - reason: ESAFENET
   description: '.*\bESAFENET\b.*'
 - reason: Free5GC
-  description: '.*\bfree5gc\b.*'
+  description: '.*\b(?i:free5gc)\b.*'
 - reason: Flowise
   description: '.*\bFlowise\b.*'
 - reason: Intelbras



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/ee631b0760229b9e3ea60d055f69e5a4122bbe87...296a7b169a22493c491c9c0f2fa82142ba66682f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/ee631b0760229b9e3ea60d055f69e5a4122bbe87...296a7b169a22493c491c9c0f2fa82142ba66682f
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260829/30f967e0/attachment.htm>