[Git][security-tracker-team/security-tracker][master] 2 commits: suricata: mark CVE-2025-64335 as not affected in trixie/bookworm/bullseye

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Dec 16 08:02:58 GMT 2025



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b1ac1399 by Andreas Dolp at 2025-12-16T07:06:04+01:00
suricata: mark CVE-2025-64335 as not affected in trixie/bookworm/bullseye

- - - - -
5df4232c by Salvatore Bonaccorso at 2025-12-16T09:02:49+01:00
Merge branch 'users/ecite/suricata-8-only-cves' into 'master'

suricata: mark CVE-2025-64335 as not affected in trixie/bookworm/bullseye

See merge request security-tracker-team/security-tracker!252
- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -6996,8 +6996,9 @@ CVE-2025-64344 (Suricata is a network IDS, IPS and NSM engine developed by the O
 	NOTE: Fixed by: https://github.com/OISF/suricata/commit/a7ff4c9ba53009680c7cd128b16c28d0aeda9886 (suricata-7.0.13)
 CVE-2025-64335 (Suricata is a network IDS, IPS and NSM engine developed by the OISF (O ...)
 	- suricata 1:8.0.2-1
-	[trixie] - suricata <no-dsa> (Minor issue; will be fixed via point release)
-	[bookworm] - suricata <no-dsa> (Minor issue)
+	[trixie] - suricata <not-affected> (Vulnerable code introduced later)
+	[bookworm] - suricata <not-affected> (Vulnerable code introduced later)
+	[bullseye] - suricata <not-affected> (Vulnerable code introduced later)
 	NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-v299-h7p3-q4f2
 	NOTE: https://redmine.openinfosecfoundation.org/issues/7959
 	NOTE: Fixed by: https://github.com/OISF/suricata/commit/c935f08cd988600fd0a4f828a585b181dd5de012 (suricata-8.0.2)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/7249af1ffe46d0c7d385737f131c0a4483f6546a...5df4232ceb863f52de4120b5ddc461aaa758ee13

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/7249af1ffe46d0c7d385737f131c0a4483f6546a...5df4232ceb863f52de4120b5ddc461aaa758ee13
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251216/6ac3f873/attachment.htm>


More information about the debian-security-tracker-commits mailing list