[Git][security-tracker-team/security-tracker][master] add note on libxml2 mitigation

Moritz Muehlenhoff (@jmm) jmm at debian.org
Thu Aug 14 09:24:20 BST 2025



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fda1ea4d by Moritz Muehlenhoff at 2025-08-14T10:23:43+02:00
add note on libxml2 mitigation

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -9003,6 +9003,7 @@ CVE-2025-7425 (A flaw was found in libxslt where the attribute type, atype, flag
 	NOTE: and followups.
 	NOTE: Mitigated by https://gitlab.gnome.org/GNOME/libxml2/-/commit/9de92ed78d8495527c5d7a4d0cc76c1f83768195 (2.14)
 	NOTE: https://gitlab.gnome.org/GNOME/libxml2/-/commit/f1e1f13b766eb580a8dcc0c4e7a447346dfd862e (master)
+	NOTE: Mitigation landed in sid in 2.14.5+dfsg-0.1
 CVE-2025-7424 (A flaw was found in the libxslt library. The same memory field, psvi,  ...)
 	- libxslt 1.1.35-2 (bug #1109123)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2379228



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fda1ea4dc8b5ab0aca98662e13ef143afb97495e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fda1ea4dc8b5ab0aca98662e13ef143afb97495e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250814/6579b424/attachment.htm>


More information about the debian-security-tracker-commits mailing list