[Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-4947 and CVE-2025-5025

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d7c47881 by Salvatore Bonaccorso at 2025-06-12T06:55:11+02:00
Update status for CVE-2025-4947 and CVE-2025-5025

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4232,7 +4232,7 @@ CVE-2025-27526 (Deserialization of Untrusted Data vulnerability in Apache InLong
 CVE-2025-27522 (Deserialization of Untrusted Data vulnerability in Apache InLong.  Thi ...)
 	NOT-FOR-US: Apache InLong
 CVE-2025-5025 (libcurl supports *pinning* of the server certificate public key for HT ...)
-	- curl <unfixed> (unimportant)
+	- curl 8.14.0-1 (unimportant)
 	[bookworm] - curl <not-affected> (Vulnerable code not present)
 	[bullseye] - curl <not-affected> (Vulnerable code not present)
 	NOTE: https://curl.se/docs/CVE-2025-5025.html
@@ -4240,7 +4240,7 @@ CVE-2025-5025 (libcurl supports *pinning* of the server certificate public key f
 	NOTE: Fixed by: https://github.com/curl/curl/commit/e1f65937a96a451292e9231339672797da86ecc5 (curl-8_14_0)
 	NOTE: curl in Debian not built with wolfSSL support
 CVE-2025-4947 (libcurl accidentally skips the certificate verification for QUIC conne ...)
-	- curl <unfixed> (unimportant)
+	- curl 8.14.0-1 (unimportant)
 	[bookworm] - curl <not-affected> (Vulnerable code not present)
 	[bullseye] - curl <not-affected> (Vulnerable code not present)
 	NOTE: https://curl.se/docs/CVE-2025-4947.html



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d7c4788183405e0812344be8ed973331553a9e94

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d7c4788183405e0812344be8ed973331553a9e94
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250612/2826e1d7/attachment.htm>