[Git][security-tracker-team/security-tracker][master] Add new gobgp issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9cc48aed by Salvatore Bonaccorso at 2025-04-21T09:40:44+02:00
Add new gobgp issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,11 +1,15 @@
 CVE-2025-43973 (An issue was discovered in GoBGP before 3.35.0. pkg/packet/rtr/rtr.go  ...)
-	TODO: check
+	- gobgp 3.35.0-1
+	NOTE: Fixed by: https://github.com/osrg/gobgp/commit/5693c58a4815cc6327b8d3b6980f0e5aced28abe (v3.35.0)
 CVE-2025-43972 (An issue was discovered in GoBGP before 3.35.0. An attacker can cause  ...)
-	TODO: check
+	- gobgp 3.35.0-1
+	NOTE: Fixed by: https://github.com/osrg/gobgp/commit/ca7383f450f7b296c5389feceef2467de5ab6e5a (v3.35.0)
 CVE-2025-43971 (An issue was discovered in GoBGP before 3.35.0. pkg/packet/bgp/bgp.go  ...)
-	TODO: check
+	- gobgp 3.35.0-1
+	NOTE: Fixed by: https://github.com/osrg/gobgp/commit/08a001e06d90e8bcc190084c66992f46f62c0986 (v3.35.0)
 CVE-2025-43970 (An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go  ...)
-	TODO: check
+	- gobgp 3.35.0-1
+	NOTE: Fixed by: https://github.com/osrg/gobgp/commit/5153bafbe8dbe1a2f02a70bbf0365e98b80e47b0 (v3.35.0)
 CVE-2025-43967 (libheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid ...)
 	TODO: check
 CVE-2025-43966 (libheif before 1.19.6 has a NULL pointer dereference in ImageItem_iden ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9cc48aed5888902bc066067644565653f019c3f7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9cc48aed5888902bc066067644565653f019c3f7
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250421/cd3b394a/attachment.htm>