[Git][security-tracker-team/security-tracker][master] Update status for two new wordpress issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Oct 3 08:43:05 BST 2025



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1e18272b by Salvatore Bonaccorso at 2025-10-03T09:42:30+02:00
Update status for two new wordpress issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3148,7 +3148,7 @@ CVE-2025-59484 (The use of a broken or risky cryptographic algorithm was discove
 	NOT-FOR-US: Click Plus PLC
 CVE-2025-58674 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	- wordpress <unfixed> (bug #1117047)
-	TODO: check details, apparently affected up to 6.8.2
+	NOTE: https://wordpress.org/news/2025/09/wordpress-6-8-3-release/
 CVE-2025-58473 (An improper resource shutdown or release vulnerability has been identi ...)
 	NOT-FOR-US: Click Plus devices
 CVE-2025-58354 (Kata Containers is an open source project focusing on a standard imple ...)
@@ -3159,7 +3159,7 @@ CVE-2025-58317 (Delta Electronics CNCSoft-G2lacks proper validation of the user-
 	NOT-FOR-US: Delta Electronics
 CVE-2025-58246 (Insertion of Sensitive Information Into Sent Data vulnerability in Wor ...)
 	- wordpress <unfixed> (bug #1117047)
-	TODO: check details, still affect 6.8.2, no upstream fix apparently
+	NOTE: https://wordpress.org/news/2025/09/wordpress-6-8-3-release/
 CVE-2025-58069 (The use of a hard-coded cryptographic key was discovered in firmware v ...)
 	NOT-FOR-US: Click Plus PLC
 CVE-2025-57882 (An improper resource shutdown or release vulnerability has been identi ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1e18272b92ad16892d5284a9e401418d7398b2c0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1e18272b92ad16892d5284a9e401418d7398b2c0
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251003/bc9ff80e/attachment.htm>


More information about the debian-security-tracker-commits mailing list