[Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Apache rule

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d89d5577 by Moritz Muehlenhoff at 2026-05-05T13:17:07+02:00
auto-nfu: Extend Apache rule

- - - - -


2 changed files:

- data/CVE/list
- data/packages/nfu.yaml


Changes:

=====================================
data/CVE/list
=====================================
@@ -263,7 +263,7 @@ CVE-2026-40682 (XML External Entity (XXE) via Unsanitized Dictionary Parsing in
 	- apache-opennlp <unfixed>
 	NOTE: https://www.openwall.com/lists/oss-security/2026/05/01/19
 CVE-2026-40563 (Description: Improper Control of Generation of Code ('Code Injection') ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-3456 (The GeekyBot \u2014 Generate AI Content Without Prompt, Chatbot and Le ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-3454 (The GenerateBlocks plugin for WordPress is vulnerable to Insecure Dire ...)


=====================================
data/packages/nfu.yaml
=====================================
@@ -318,6 +318,7 @@
       - product: Apache Answer
       - product: Apache Artemis
       - product: Apache Avro Java SDK
+      - product: Apache Atlas
       - product: Apache CXF
       - product: Apache Camel
       - product: Apache Camel JMS



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d89d5577caeae6267b0aba7c27e5b72e9082826b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d89d5577caeae6267b0aba7c27e5b72e9082826b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260505/e6024a53/attachment.htm>