[Git][security-tracker-team/security-tracker][master] 2 commits: Add reference for patches for CVE-2025-22247

Salvatore Bonaccorso (@carnil) carnil at debian.org
Mon May 12 18:19:52 BST 2025



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1794a373 by Salvatore Bonaccorso at 2025-05-12T19:18:58+02:00
Add reference for patches for CVE-2025-22247

- - - - -
2629b21f by Salvatore Bonaccorso at 2025-05-12T19:19:20+02:00
Reference oss-security post for CVE-2025-22247

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -23,6 +23,8 @@ CVE-2025-23395
 CVE-2025-22247 [insecure file handling vulnerability (CVE-2025-22247)]
 	- open-vm-tools 2:12.5.0-2 (bug #1105159)
 	NOTE: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683
+	NOTE: Patches: https://github.com/vmware/open-vm-tools/tree/CVE-2025-22247.patch
+	NOTE: https://www.openwall.com/lists/oss-security/2025/05/12/2
 CVE-2025-4561 (The KFOX from KingFor has an Arbitrary File Upload vulnerability, allo ...)
 	NOT-FOR-US: KFOX
 CVE-2025-4560 (The ISOinsight from Netvision has a Missing Authentication vulnerabili ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/e3b0d13ce5a9746c3aaadfbf9b13a9c83315f54a...2629b21f9a15b470768a26d40abaad9c620e4771

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/e3b0d13ce5a9746c3aaadfbf9b13a9c83315f54a...2629b21f9a15b470768a26d40abaad9c620e4771
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250512/6eea26a7/attachment.htm>


More information about the debian-security-tracker-commits mailing list