[Git][security-tracker-team/security-tracker][master] new golang-go.crypto issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
85eed7e5 by Moritz Muehlenhoff at 2025-02-26T17:50:28+01:00
new golang-go.crypto issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -24,7 +24,11 @@ CVE-2025-25514 (Seacms <=13.3 is vulnerable to SQL Injection in admin_collect_ne
 CVE-2025-22881 (Delta Electronics CNCSoft-G2 lacks proper validation of the length of  ...)
 	NOT-FOR-US: Delta Electronics
 CVE-2025-22869 (SSH servers which implement file transfer protocols are vulnerable to  ...)
-	TODO: check
+	- golang-go.crypto <unfixed>
+	[bookworm] - golang-go.crypto <no-dsa> (Minor issue)
+	NOTE: https://github.com/golang/go/issues/71931
+	NOTE: https://go-review.googlesource.com/c/crypto/+/652135
+	NOTE: https://pkg.go.dev/vuln/GO-2025-3487
 CVE-2025-22868 (An attacker can pass a malicious malformed token which causes unexpect ...)
 	TODO: check
 CVE-2025-22211 (A SQL injection vulnerability in the JoomShopping component versions 1 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/85eed7e5c87cf4c3e47b24bfa856ce58083d9f43

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/85eed7e5c87cf4c3e47b24bfa856ce58083d9f43
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250226/19598b20/attachment.htm>