[Git][security-tracker-team/security-tracker][master] 2 commits: Typos
Sylvain Beucler (@beuc)
gitlab at salsa.debian.org
Sat May 10 22:50:00 BST 2025
Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker
Commits:
a53cdc5b by Sylvain Beucler at 2025-05-10T23:40:20+02:00
Typos
- - - - -
181314e4 by Sylvain Beucler at 2025-05-10T23:48:59+02:00
CVE-2025-4373/glib2.0: bullseye posptoned
We did an update only a few weeks ago.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -683,7 +683,7 @@ CVE-2025-46727 (Rack is a modular Ruby web server interface. Prior to versions 2
- ruby-rack <unfixed> (bug #1104927)
NOTE: https://github.com/rack/rack/security/advisories/GHSA-gjh7-p2fx-99vx
NOTE: Fixed by: https://github.com/rack/rack/commit/cd6b70a1f2a1016b73dc906f924869f4902c2d74 (v3.1.14)
- NOTE: Fxied by: https://github.com/rack/rack/commit/2bb5263b464b65ba4b648996a579dbd180d2b712 (v3.0.16)
+ NOTE: Fixed by: https://github.com/rack/rack/commit/2bb5263b464b65ba4b648996a579dbd180d2b712 (v3.0.16)
NOTE: Fixed by: https://github.com/rack/rack/commit/3f5a4249118d09d199fe480466c8c6717e43b6e3 (v2.2.14)
CVE-2025-46265 (On F5OS, an improper authorization vulnerability exists where remotely ...)
NOT-FOR-US: F5
@@ -1505,6 +1505,7 @@ CVE-2025-4374 (A flaw was found in Quay. When an organization acts as a proxy ca
CVE-2025-4373 (A flaw was found in GLib, which is vulnerable to an integer overflow i ...)
- glib2.0 <unfixed> (bug #1104930)
[bookworm] - glib2.0 <no-dsa> (Minor issue)
+ [bullseye] - glib2.0 <postponed> (Minor issue, fix along with next update)
NOTE: https://gitlab.gnome.org/GNOME/glib/-/issues/3677
NOTE: https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4588
NOTE: https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4592
@@ -289936,7 +289937,7 @@ CVE-2021-45844 (Improper sanitization in the invocation of ODA File Converter fr
{DSA-5229-1 DLA-3076-1 DLA-2934-1}
- freecad 0.19.4+dfsg1-1 (bug #1005747)
NOTE: Fixed by; https://github.com/FreeCAD/FreeCAD/commit/1742d7ff82af1653253c4a4183c262c9af3b26d6 (master)
- NOTE: Fxied by: https://github.com/FreeCAD/FreeCAD/commit/ad6977f940d3e64d78a4367452d9a338ad43fa1c (0.19.4)
+ NOTE: Fixed by: https://github.com/FreeCAD/FreeCAD/commit/ad6977f940d3e64d78a4367452d9a338ad43fa1c (0.19.4)
NOTE: https://tracker.freecad.org/view.php?id=4809
CVE-2021-45843 (glFusion CMS v1.7.9 is affected by a reflected Cross Site Scripting (X ...)
NOT-FOR-US: glFusion CMS
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/9313b0cb55f4d1ffc14fa791cf0ea7fdd768a364...181314e4b94a1b30006c223fda190dd92b843f6e
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/9313b0cb55f4d1ffc14fa791cf0ea7fdd768a364...181314e4b94a1b30006c223fda190dd92b843f6e
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250510/e40c1f93/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list