[Git][security-tracker-team/security-tracker][master] Add reference to upstream commit in 2.72.6 for CVE-2025-22145

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0781896d by Salvatore Bonaccorso at 2025-01-09T22:22:29+01:00
Add reference to upstream commit in 2.72.6 for CVE-2025-22145

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -308,6 +308,7 @@ CVE-2025-22145 (Carbon is an international PHP extension for DateTime. Applicati
 	- php-nesbot-carbon <unfixed>
 	NOTE: https://github.com/CarbonPHP/carbon/security/advisories/GHSA-j3f9-p6hm-5w6q
 	NOTE: https://github.com/briannesbitt/Carbon/commit/129700ed449b1f02d70272d2ac802357c8c30c58 (3.8.4)
+	NOTE: https://github.com/briannesbitt/Carbon/commit/1e9d50601e7035a4c61441a208cb5bed73e108c5 (2.72.6)
 CVE-2025-20033 (Mattermost versions 10.2.0, 9.11.x <= 9.11.5, 10.0.x <= 10.0.3, 10.1.x ...)
 	- mattermost-server <itp> (bug #823556)
 CVE-2025-0344 (A vulnerability has been found in leiyuxi cy-fast 1.0 and classified a ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0781896d6322f1e86822495357e90ff697ac7891

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0781896d6322f1e86822495357e90ff697ac7891
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250109/a654b5a6/attachment.htm>