[Git][security-tracker-team/security-tracker][master] add sudo-rs CVEs to DSA entry

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1493a4c6 by Moritz Muehlenhoff at 2025-11-11T20:27:06+01:00
add sudo-rs CVEs to DSA entry

- - - - -


2 changed files:

- data/CVE/list
- data/DSA/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -417,12 +417,10 @@ CVE-2025-12155 (A Command Injection vulnerability, resulting from improper file
 	TODO: check
 CVE-2025-64170 [GHSA-c978-wq47-pvvw]
 	- rust-sudo-rs 0.2.10-1
-	[trixie] - rust-sudo-rs 0.2.5-5+deb13u1
 	NOTE: https://github.com/trifectatechfoundation/sudo-rs/security/advisories/GHSA-c978-wq47-pvvw
 	NOTE: Fixed by: https://github.com/trifectatechfoundation/sudo-rs/commit/0926e85913f45937a32b282c0757bc902dbb1e0c (v0.2.10)
 CVE-2025-64517 [GHSA-q428-6v73-fc4q]
 	- rust-sudo-rs 0.2.10-1
-	[trixie] - rust-sudo-rs 0.2.5-5+deb13u1
 	NOTE: https://github.com/trifectatechfoundation/sudo-rs/security/advisories/GHSA-q428-6v73-fc4q
 	NOTE: Fixed by: https://github.com/trifectatechfoundation/sudo-rs/commit/0e3d3837aec3ee9fb5dcb8bfe11e8adb367f58f4 (v0.2.10)
 CVE-2025-62689 (NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1. ...)


=====================================
data/DSA/list
=====================================
@@ -1,4 +1,5 @@
 [11 Nov 2025] DSA-6052-1 rust-sudo-rs - security update
+	{CVE-2025-64170 CVE-2025-64171}
 	[trixie] - rust-sudo-rs 0.2.5-5+deb13u1
 [10 Nov 2025] DSA-6051-1 incus - security update
 	{CVE-2025-64507}



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1493a4c64cadd2d7851da634e10784c20f0d06ea

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1493a4c64cadd2d7851da634e10784c20f0d06ea
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251111/c591c13d/attachment-0001.htm>