[Git][security-tracker-team/security-tracker][master] Add two CVEs for golang-github-bep-imagemeta, itp'ed

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d128e7c8 by Salvatore Bonaccorso at 2025-04-09T09:08:48+02:00
Add two CVEs for golang-github-bep-imagemeta, itp'ed

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -37,9 +37,9 @@ CVE-2025-32028 (HAX CMS PHP allows you to manage your microsite universe with PH
 CVE-2025-32026 (Element Web is a Matrix web client built using the Matrix React SDK. E ...)
 	- element-web <itp> (bug #866502)
 CVE-2025-32025 (bep/imagemeta is a Go library for reading EXIF, IPTC and XMP image met ...)
-	TODO: check
+	- golang-github-bep-imagemeta <itp> (bug #1077638)
 CVE-2025-32024 (bep/imagemeta is a Go library for reading EXIF, IPTC and XMP image met ...)
-	TODO: check
+	- golang-github-bep-imagemeta <itp> (bug #1077638)
 CVE-2025-32020 (The crud-query-parser library parses query parameters from HTTP reques ...)
 	NOT-FOR-US: crud-query-parser library
 CVE-2025-32018 (Cursor is a code editor built for programming with AI. In versions 0.4 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d128e7c83aeb5a661de73a9ad938848bb43520bf

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d128e7c83aeb5a661de73a9ad938848bb43520bf
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250409/1991f62e/attachment-0001.htm>