[Git][security-tracker-team/security-tracker][master] new golang-github-nwaples-rardecode issue (concludes external check)

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
50a372cd by Moritz Muehlenhoff at 2025-10-12T15:10:59+02:00
new golang-github-nwaples-rardecode issue (concludes external check)

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -381,7 +381,8 @@ CVE-2025-11581 (A security vulnerability has been detected in PowerJob up to 5.1
 CVE-2025-11580 (A weakness has been identified in PowerJob up to 5.1.2. This affects t ...)
 	NOT-FOR-US: PowerJob
 CVE-2025-11579 (github.com/nwaples/rardecode versions <=2.1.1 fail to restrict the dic ...)
-	TODO: check
+	- golang-github-nwaples-rardecode <unfixed>
+	NOTE: https://github.com/nwaples/rardecode/commit/52fb4e825c936636f251f7e7deded39ab11df9a9 (v2.2.0)
 CVE-2025-11190 (The Kiwire Captive Portal contains an open redirection issue via the l ...)
 	NOT-FOR-US: Kiwire Captive Portal
 CVE-2025-11189 (The Kiwire Captive Portal contains a reflected cross-site scripting (X ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/50a372cd27e4cd264cc4d2ee8a229771b64332e6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/50a372cd27e4cd264cc4d2ee8a229771b64332e6
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251012/8fc26c06/attachment.htm>