[Git][security-tracker-team/security-tracker][master] Add CVE-2025-59820/krita

Salvatore Bonaccorso (@carnil) carnil at debian.org
Mon Nov 24 18:01:46 GMT 2025



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
97099408 by Salvatore Bonaccorso at 2025-11-24T19:00:43+01:00
Add CVE-2025-59820/krita

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,7 @@
+CVE-2025-59820 [Heap-based buffer overflow when parsing TGA files]
+	- krita 1:5.2.13+dfsg-1
+	NOTE: https://kde.org/info/security/advisory-20250929-1.txt
+	NOTE: Fixed by: https://commits.kde.org/krita/6d3651ac4df88efb68e013d21061de9846e83fe8 (v5.2.13)
 CVE-2025-40213 [Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete]
 	- linux 6.17.8-1
 	[bookworm] - linux <not-affected> (Vulnerable code not present)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/970994080ec7f5a40b07fe3055f3cb224766d116

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/970994080ec7f5a40b07fe3055f3cb224766d116
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251124/144e00d8/attachment.htm>


More information about the debian-security-tracker-commits mailing list