[Git][security-tracker-team/security-tracker][master] CVE-2025-27553,commons-vfs: fixed in unstable

[Markus Koschany (@apo)]

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2bd0b600 by Markus Koschany at 2025-04-03T03:59:38+02:00
CVE-2025-27553,commons-vfs: fixed in unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4624,7 +4624,7 @@ CVE-2025-29795 (Improper link resolution before file access ('link following') i
 	NOT-FOR-US: Microsoft
 CVE-2025-27553 (Relative Path Traversal vulnerability in Apache Commons VFS before 2.1 ...)
 	{DLA-4111-1}
-	- commons-vfs <unfixed> (bug #1101204)
+	- commons-vfs 2.1-5 (bug #1101204)
 	NOTE: https://www.openwall.com/lists/oss-security/2025/03/23/1
 	NOTE: Fixed by: https://github.com/apache/commons-vfs/commit/83d815afad4057234d9f928f6f00701bb7b51e86 (commons-vfs-2.10.0-RC1)
 CVE-2025-2644 (A vulnerability was found in PHPGurukul Art Gallery Management System  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2bd0b6005a763d77191afe6ae9f4d187be65d405

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2bd0b6005a763d77191afe6ae9f4d187be65d405
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250403/89fb6e87/attachment.htm>