[Git][security-tracker-team/security-tracker][master] auto-nfu: Narrow down scope for GitLab CNA rule

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1d807ee6 by Salvatore Bonaccorso at 2026-07-15T11:19:57+02:00
auto-nfu: Narrow down scope for GitLab CNA rule

GitLab CNA apparently still assigns CVEs e.g. for wireshark. Narrow down
the socpe for now to only cover product 'GitLab' for the NFU rule where
we exceptionally track GitLab now as NFU.

- - - - -


1 changed file:

- data/packages/nfu.yaml


Changes:

=====================================
data/packages/nfu.yaml
=====================================
@@ -119,8 +119,6 @@
   cna: Genetec
 - reason: Github Enterprise Server
   cna: GitHub_P
-- reason: GitLab (used to be packaged in the Debian archive as src:gitlab, but never in a stable release)
-  cna: GitLab
 - reason: Google devices
   cna: Google_Devices
 - reason: Hanwha Vision
@@ -506,6 +504,11 @@
     - anyOf:
       - product: GoAnywhere MFT
       - product: GoAnywhere
+- reason: GitLab (used to be packaged in the Debian archive as src:gitlab, but never in a stable release)
+  allOf:
+    - cna: GitLab
+    - anyOf:
+      - product: GitLab
 - reason: Google products not packaged in Debian
   allOf:
     - cna: Google



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1d807ee6c9842b37484711b214e69e59bc28fbc9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1d807ee6c9842b37484711b214e69e59bc28fbc9
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260715/8bf6bc4d/attachment-0001.htm>