[Git][security-tracker-team/security-tracker][master] 3 commits: Add CVE-2025-61915/cups

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
dfc42ce0 by Salvatore Bonaccorso at 2025-11-28T06:05:54+01:00
Add CVE-2025-61915/cups

- - - - -
e035e40b by Salvatore Bonaccorso at 2025-11-28T06:08:01+01:00
Add CVE-2025-58436/cups

- - - - -
3c3e5db4 by Salvatore Bonaccorso at 2025-11-28T06:09:16+01:00
Track fixed version for two cups issues fixed via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,19 @@
+CVE-2025-58436
+	- cups 2.4.15-1
+	[trixie] - cups <no-dsa> (Minor issue)
+	[bookworm] - cups <no-dsa> (Minor issue)
+	NOTE: https://www.openwall.com/lists/oss-security/2025/11/27/4
+	NOTE: https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
+	NOTE: Fixed by: https://github.com/OpenPrinting/cups/commit/40008d76a001babbb9beb9d9d74b01a86fb6ddb4 (master)
+	NOTE: Fixed by: https://github.com/OpenPrinting/cups/commit/5d414f1f91bdca118413301b148f0b188eb1cdc6 (v2.4.15)
+CVE-2025-61915
+	- cups 2.4.15-1
+	[trixie] - cups <no-dsa> (Minor issue)
+	[bookworm] - cups <no-dsa> (Minor issue)
+	NOTE: https://www.openwall.com/lists/oss-security/2025/11/27/5
+	NOTE: https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
+	NOTE: Fixed by: https://github.com/OpenPrinting/cups/commit/524749b0449b49d8967d4f777854259bf22b278a (master)
+	NOTE: Fixed by: https://github.com/OpenPrinting/cups/commit/db8d560262c22a21ee1e55dfd62fa98d9359bcb0 (v2.4.15)
 CVE-2025-8890 (Firmware in SDMC NE6037 routers prior to version 7.1.12.2.44has a netw ...)
 	NOT-FOR-US: SDMC NE6037 routers
 CVE-2025-59890 (Improper input sanitization in the file archives upload functionality  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/5cb1e4def7132726976577fbfcb92161d0006450...3c3e5db47530294321dde3a8e83188eaefc3f568

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/5cb1e4def7132726976577fbfcb92161d0006450...3c3e5db47530294321dde3a8e83188eaefc3f568
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251128/e0224aaf/attachment.htm>