[Git][security-tracker-team/security-tracker][master] Add CVE-2025-52968/xdg-utils

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a0e96932 by Salvatore Bonaccorso at 2025-06-23T22:32:42+02:00
Add CVE-2025-52968/xdg-utils

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -27,7 +27,8 @@ CVE-2025-6509 (A vulnerability was found in seaswalker spring-analysis up to 437
 CVE-2025-52969 (ClickHouse 25.7.1.557 allows low-privileged users to execute shell com ...)
 	TODO: check
 CVE-2025-52968 (xdg-open in xdg-utils through 1.2.1 can send requests containing SameS ...)
-	TODO: check
+	- xdg-utils <unfixed>
+	NOTE: https://www.openwall.com/lists/oss-security/2025/06/23/1
 CVE-2025-52967 (gateway_proxy_handler in MLflow before 3.1.0 lacks gateway_path valida ...)
 	NOT-FOR-US: mlflow
 CVE-2025-52939 (Out-of-bounds Write vulnerability in dail8859 NotepadNext (src/lua/src ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a0e969324dad15ba5667560fb28e17b078a4aecf

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a0e969324dad15ba5667560fb28e17b078a4aecf
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250623/73bf2e36/attachment.htm>