[Git][security-tracker-team/security-tracker][master] Add CVE-2025-48074/openexr

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
564c4d09 by Salvatore Bonaccorso at 2025-08-02T08:18:37+02:00
Add CVE-2025-48074/openexr

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -81,7 +81,9 @@ CVE-2025-4684 (The BlockSpare: Gutenberg Blocks & Patterns for Blogs, Magazines,
 CVE-2025-49832 (Asterisk is an open source private branch exchange and telephony toolk ...)
 	TODO: check
 CVE-2025-48074 (OpenEXR provides the specification and reference implementation of the ...)
-	TODO: check
+	- openexr <unfixed>
+	NOTE: https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-x22w-82jp-8rvf
+	TODO: check details details
 CVE-2025-46018 (CSC Pay Mobile App 2.19.4 (fixed in version 2.20.0) contains a vulnera ...)
 	NOT-FOR-US: CSC Pay Mobile App
 CVE-2025-45778 (A stored cross-site scripting (XSS) vulnerability in The Language Slot ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/564c4d0946628409ffef2160613ba1fe3be8784f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/564c4d0946628409ffef2160613ba1fe3be8784f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250802/c80b17b6/attachment.htm>