[Git][security-tracker-team/security-tracker][master] new mbedtls issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f9ddbe46 by Moritz Muehlenhoff at 2025-03-25T16:45:12+01:00
new mbedtls issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -98,9 +98,11 @@ CVE-2025-29135 (A stack-based buffer overflow vulnerability in Tenda AC7 V15.03.
 CVE-2025-29100 (Tenda AC8 V16.03.34.06 is vulnerable to Buffer Overflow in the fromSet ...)
 	NOT-FOR-US: Tenda
 CVE-2025-27810 (Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed  ...)
-	TODO: check
+	- mbedtls <unfixed>
+	NOTE: https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-03-2/
 CVE-2025-27809 (Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, acce ...)
-	TODO: check
+	- mbedtls <unfixed>
+	NOTE: https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-03-1/
 CVE-2025-26512 (SnapCenter versions prior to  6.0.1P1 and 6.1P1 are susceptible to a v ...)
 	NOT-FOR-US: NetApp
 CVE-2025-1798 (The  does not sanitise and escape some parameters when outputting them ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f9ddbe46e6db0e112a459e542a8aba74c87f0eda

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f9ddbe46e6db0e112a459e542a8aba74c87f0eda
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250325/ebe4f0e2/attachment.htm>