[Git][security-tracker-team/security-tracker][master] 2 commits: Add Debian bug reference for nasm issue

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8f1ec209 by Salvatore Bonaccorso at 2025-08-12T22:15:16+02:00
Add Debian bug reference for nasm issue

- - - - -
7314ec57 by Salvatore Bonaccorso at 2025-08-12T22:15:18+02:00
Add Debian bug references for golang issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -655,7 +655,7 @@ CVE-2025-8846 (A vulnerability has been found in NASM Netwide Assember 2.17rc0.
 	NOTE: https://bugzilla.nasm.us/show_bug.cgi?id=3392938
 	NOTE: Crash in CLI tool, no security impact
 CVE-2025-8845 (A vulnerability was identified in NASM Netwide Assember 2.17rc0. This  ...)
-	- nasm <unfixed>
+	- nasm <unfixed> (bug #1110944)
 	[trixie] - nasm <no-dsa> (Minor issue)
 	[bookworm] - nasm <no-dsa> (Minor issue)
 	[bullseye] - nasm <postponed> (Minor issue; can be fixed in next update)
@@ -1339,9 +1339,9 @@ CVE-2023-41519 (Student Attendance Management System v1 was discovered to contai
 CVE-2023-40992 (Hospital Management System 4 is vulnerable to a SQL injection in /Hosp ...)
 	NOT-FOR-US: Hospital Management System
 CVE-2025-47907 (Cancelling a query (e.g. by cancelling the context passed to one of th ...)
-	- golang-1.24 <unfixed>
+	- golang-1.24 <unfixed> (bug #1110949)
 	[trixie] - golang-1.24 <no-dsa> (Minor issue)
-	- golang-1.23 <unfixed>
+	- golang-1.23 <unfixed> (bug #1110950)
 	- golang-1.19 <removed>
 	[bookworm] - golang-1.19 <no-dsa> (Minor issue)
 	- golang-1.15 <removed>
@@ -1351,9 +1351,9 @@ CVE-2025-47907 (Cancelling a query (e.g. by cancelling the context passed to one
 	NOTE: https://github.com/golang/go/commit/83b4a5db240960720e51b7d5a6da1f399bd868ee (go1.24.6)
 	NOTE: https://github.com/golang/go/commit/8a924caaf348fdc366bab906424616b2974ad4e9 (go1.23.12)
 CVE-2025-47906
-	- golang-1.24 <unfixed>
+	- golang-1.24 <unfixed> (bug #1110947)
 	[trixie] - golang-1.24 <no-dsa> (Minor issue)
-	- golang-1.23 <unfixed>
+	- golang-1.23 <unfixed> (bug #1110948)
 	- golang-1.19 <removed>
 	[bookworm] - golang-1.19 <no-dsa> (Minor issue)
 	- golang-1.15 <removed>
@@ -1576,8 +1576,8 @@ CVE-2025-20331 (A vulnerability in the web-based management interface of Cisco I
 CVE-2025-20215 (A vulnerability in the meeting-join functionality of Cisco Webex Meeti ...)
 	NOT-FOR-US: Cisco
 CVE-2024-8244 (The filepath.Walk and filepath.WalkDir functions are documented as not ...)
-	- golang-1.24 <unfixed>
-	- golang-1.23 <unfixed>
+	- golang-1.24 <unfixed> (bug #1110945)
+	- golang-1.23 <unfixed> (bug #1110946)
 	- golang-1.19 <removed>
 	- golang-1.15 <removed>
 	NOTE: https://github.com/golang/go/issues/70007



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/f94359687c2d46d2712685c065e734d979580fe2...7314ec57725fcda5bca11c6bf6da1508e3ad87fb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/f94359687c2d46d2712685c065e734d979580fe2...7314ec57725fcda5bca11c6bf6da1508e3ad87fb
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250812/e7549f01/attachment-0001.htm>