[Git][security-tracker-team/security-tracker][master] Add CVE-2025-14104/util-linux

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Dec 5 21:18:53 GMT 2025



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b886b480 by Salvatore Bonaccorso at 2025-12-05T22:18:19+01:00
Add CVE-2025-14104/util-linux

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -119,7 +119,12 @@ CVE-2025-34257 (Advantech WISE-DeviceOn Server versions prior to 5.4contain a st
 CVE-2025-34256 (Advantech WISE-DeviceOn Server versions prior to 5.4contain a hard-cod ...)
 	NOT-FOR-US: Advantech
 CVE-2025-14104 (A flaw was found in util-linux. This vulnerability allows a heap buffe ...)
-	TODO: check
+	- util-linux <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2419369
+	NOTE: https://github.com/util-linux/util-linux/issues/3585
+	NOTE: https://github.com/util-linux/util-linux/pull/3586
+	NOTE: Fixed by: https://github.com/util-linux/util-linux/commit/aaa9e718c88d6916b003da7ebcfe38a3c88df8e6
+	NOTE: Fixed by: https://github.com/util-linux/util-linux/commit/9a36d77012c4c771f8d51eba46b6e62c29bf572a
 CVE-2025-14094 (A flaw has been found in Edimax BR-6478AC V3 1.0.15. The affected elem ...)
 	NOT-FOR-US: Edimax
 CVE-2025-14093 (A vulnerability was detected in Edimax BR-6478AC V3 1.0.15. Impacted i ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b886b4805e4478acf3982268f5df18566e98d67d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b886b4805e4478acf3982268f5df18566e98d67d
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251205/57439c5e/attachment.htm>


More information about the debian-security-tracker-commits mailing list