[Git][security-tracker-team/security-tracker][master] CVE-2025-27553,commons-vfs: link to fixing commit

[Markus Koschany (@apo)]

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7c542833 by Markus Koschany at 2025-04-02T19:36:16+02:00
CVE-2025-27553,commons-vfs: link to fixing commit

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4511,6 +4511,7 @@ CVE-2025-29795 (Improper link resolution before file access ('link following') i
 CVE-2025-27553 (Relative Path Traversal vulnerability in Apache Commons VFS before 2.1 ...)
 	- commons-vfs <unfixed> (bug #1101204)
 	NOTE: https://www.openwall.com/lists/oss-security/2025/03/23/1
+	NOTE: Fixed by https://github.com/apache/commons-vfs/pull/558/commits/4ac8c9d3566d13e033e385b5a39bfc57f53374f5
 CVE-2025-2644 (A vulnerability was found in PHPGurukul Art Gallery Management System  ...)
 	NOT-FOR-US: PHPGurukul
 CVE-2025-2643 (A vulnerability has been found in PHPGurukul Art Gallery Management Sy ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7c542833a9f0a1d5bce01581859437e436cffcac

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7c542833a9f0a1d5bce01581859437e436cffcac
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250402/87462972/attachment-0001.htm>