[Git][security-tracker-team/security-tracker][master] auto-nfu: Add rule for Elastic

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c842100a by Moritz Muehlenhoff at 2026-07-02T12:47:49+02:00
auto-nfu: Add rule for Elastic

elasticsearch was removed eight years ago, no point in tracking as removed
any further.

- - - - -


2 changed files:

- data/CVE/list
- data/packages/nfu.yaml


Changes:

=====================================
data/CVE/list
=====================================
@@ -451,7 +451,7 @@ CVE-2026-49119 (Gradio before 6.16.0 contain a path traversal vulnerability in t
 CVE-2026-49091 (Improper Output Neutralization for Logs (CWE-117) in Kibana can lead t ...)
 	- kibana <itp> (bug #700337)
 CVE-2026-49090 (Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead  ...)
-	TODO: check
+	NOT-FOR-US: Elasticsearch
 CVE-2026-49088 (Insertion of Sensitive Information into Log File (CWE-532) in Kibana c ...)
 	- kibana <itp> (bug #700337)
 CVE-2026-49087 (Allocation of Resources Without Limits or Throttling (CWE-770) in Kiba ...)


=====================================
data/packages/nfu.yaml
=====================================
@@ -466,6 +466,11 @@
       - product: ThreadX
       - product: USBX
       - product: Vert.x
+- reason: Elasticsearch
+  allOf:
+    - cna: elastic
+    - anyOf:
+      - product: Elasticsearch
 - reason: Esri
   allOf:
     - cna: Esri



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c842100a0185e3f53206225209d61f2b17b396e3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c842100a0185e3f53206225209d61f2b17b396e3
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260702/2583d8bf/attachment.htm>