[Git][security-tracker-team/security-tracker][master] Add CVE-2025-46337/libphp-adodb

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
88c35bbc by Salvatore Bonaccorso at 2025-05-01T22:30:13+02:00
Add CVE-2025-46337/libphp-adodb

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -53,7 +53,10 @@ CVE-2025-46565 (Vite is a frontend tooling framework for javascript. Prior to ve
 CVE-2025-46345 (Auth0 Account Link Extension is an extension aimed to help link accoun ...)
 	NOT-FOR-US: Auth0 Account Link Extension
 CVE-2025-46337 (ADOdb is a PHP database class library that provides abstractions for p ...)
-	TODO: check
+	- libphp-adodb <unfixed>
+	NOTE: https://github.com/ADOdb/ADOdb/security/advisories/GHSA-8x27-jwjr-8545
+	NOTE: https://github.com/ADOdb/ADOdb/issues/1070
+	NOTE: https://github.com/ADOdb/ADOdb/commit/11107d6d6e5160b62e05dff8a3a2678cf0e3a426 (v5.22.9)
 CVE-2025-44867 (Tenda W20E V15.11.0.6 was found to contain a command injection vulnera ...)
 	NOT-FOR-US: Tenda
 CVE-2025-44866 (Tenda W20E V15.11.0.6 was found to contain a command injection vulnera ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/88c35bbc1485871028fb3bc52c49b008a516a3b5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/88c35bbc1485871028fb3bc52c49b008a516a3b5
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250501/c0f5ddbe/attachment-0001.htm>