[Git][security-tracker-team/security-tracker][master] CVE-2025-1492/wireshark: bullseye not-affected

[Sylvain Beucler (@beuc)]

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8a67c799 by Sylvain Beucler at 2025-02-21T10:22:18+01:00
CVE-2025-1492/wireshark: bullseye not-affected

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -273,8 +273,10 @@ CVE-2025-21355 (Missing Authentication for Critical Function in Microsoft Bing a
 	NOT-FOR-US: Microsoft
 CVE-2025-1492 (Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 ...)
 	- wireshark 4.4.4-1
+	[bullseye] - wireshark <not-affected> (Vulnerable dissector not present)
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2025-01.html
 	NOTE: https://gitlab.com/wireshark/wireshark/-/issues/20373
+	NOTE: CBOR Object Signing and Encryption (COSE) dissector introduced in 3.6.0rc0
 CVE-2025-1293 (Hermes versions up to 0.4.0 improperly validated the JWT provided when ...)
 	TODO: check
 CVE-2025-1223 (An attacker can gain application privileges in order to perform limite ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8a67c799b3215a9c32a7eabe4037354c25fcbb30

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8a67c799b3215a9c32a7eabe4037354c25fcbb30
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250221/207f93a7/attachment.htm>