[Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Apache rule

Moritz Muehlenhoff (@jmm) jmm at debian.org
Fri Jul 3 23:02:14 BST 2026



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
99d221d6 by Moritz Muehlenhoff at 2026-07-04T00:01:55+02:00
auto-nfu: Extend Apache rule

- - - - -


2 changed files:

- data/CVE/list
- data/packages/nfu.yaml


Changes:

=====================================
data/CVE/list
=====================================
@@ -41,11 +41,11 @@ CVE-2026-49814 (Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS
 CVE-2026-49813 (Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 r ...)
 	NOT-FOR-US: Dell / EMC
 CVE-2026-47898 (Improper Restriction of XML External Entity Reference vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-47897 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-47896 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-46730 (Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 r ...)
 	NOT-FOR-US: Dell / EMC
 CVE-2026-46468 (Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 r ...)


=====================================
data/packages/nfu.yaml
=====================================
@@ -365,6 +365,7 @@
       - product: Apache Kylin
       - product: Apache Kyuubi
       - product: Apache Livy
+      - product: Apache Lucene.Net
       - product: Apache Mynewt NimBLE
       - product: Apache Neethi
       - product: Apache NiFi



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/99d221d657719f6a813180fbb2638e780e8ba4bd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/99d221d657719f6a813180fbb2638e780e8ba4bd
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260703/140cdb66/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list