[Git][security-tracker-team/security-tracker][master] CVE-2025-30474,commons-vfs: Debian is not affected

[Markus Koschany (@apo)]

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker


Commits:
46136584 by Markus Koschany at 2025-04-02T18:10:32+02:00
CVE-2025-30474,commons-vfs: Debian is not affected

CVE-2025-30474 got assigned for an issue that dates back to 2009

https://issues.apache.org/jira/browse/VFS-169

The problem was fixed in 2.0-RC1, first version in Debian was 2.0-1 in 2011.

https://github.com/apache/commons-vfs/commit/9c22e5297c7cb9dd75adec7ebcba06448e993bd8

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4462,9 +4462,10 @@ CVE-2024-10558 (The Form Maker by 10Web  WordPress plugin before 1.15.30 does no
 CVE-2018-25109 (A vulnerability has been found in Nintendo Animal Crossing, Doubutsu n ...)
 	NOT-FOR-US: Various GameCube games
 CVE-2025-30474 (Exposure of Sensitive Information to an Unauthorized Actor vulnerabili ...)
-	- commons-vfs <unfixed> (bug #1101204)
+	- commons-vfs 2.0-1 (bug #1101204)
 	NOTE: https://www.openwall.com/lists/oss-security/2025/03/23/2
 	NOTE: https://issues.apache.org/jira/browse/VFS-169
+	NOTE: https://github.com/apache/commons-vfs/commit/9c22e5297c7cb9dd75adec7ebcba06448e993bd8
 CVE-2025-2691 (Versions of the package nossrf before 1.0.4 are vulnerable to Server-S ...)
 	NOT-FOR-US: Node nossrf
 CVE-2025-2662 (A vulnerability was found in Project Worlds Online Time Table Generato ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/46136584e7001247765534750e1e09f0087c66bb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/46136584e7001247765534750e1e09f0087c66bb
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250402/9602e9ba/attachment.htm>