[Git][security-tracker-team/security-tracker][master] Add bullseye anotation for CVE-2025-3573
Bastien Roucariès (@rouca)
rouca at debian.org
Fri Apr 25 23:03:19 BST 2025
Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker
Commits:
93043d1c by Bastien Roucariès at 2025-04-26T00:02:24+02:00
Add bullseye anotation for CVE-2025-3573
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3714,9 +3714,11 @@ CVE-2025-3576 (A vulnerability in the MIT Kerberos implementation allows GSSAPI-
NOTE: explicitly configured with the new allow_rc4 or allow_des3 variables respectively.
CVE-2025-3573 (Versions of the package jquery-validation before 1.20.0 are vulnerable ...)
- civicrm <unfixed> (bug #1103445)
+ [bullseye] - civicrm <postponed> (Minor Issue; XSS)
- kalkun <unfixed> (bug #1104134)
- znuny <unfixed> (bug #1104135)
- phpmyadmin <unfixed> (bug #1104136)
+ [bullseye] - phpmyadmin <postponed> (Minor Issue; barely an issue in the phpmyadmin package XSS)
NOTE: https://github.com/jquery-validation/jquery-validation/pull/2462
NOTE: https://github.com/jquery-validation/jquery-validation/commit/7a490d8f39bd988027568ddcf51755e1f4688902
NOTE: civicrm embedds jquery-validation
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/93043d1ca1f6ba3f93129482abdb961cb2ff2ebc
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/93043d1ca1f6ba3f93129482abdb961cb2ff2ebc
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250425/a78c4ef0/attachment.htm>
More information about the debian-security-tracker-commits
mailing list