[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-11579/golang-github-nwaples-rardecode

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a1a60d20 by Salvatore Bonaccorso at 2025-10-13T21:26:11+02:00
Track fixed version for CVE-2025-11579/golang-github-nwaples-rardecode

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -662,7 +662,7 @@ CVE-2025-11581 (A security vulnerability has been detected in PowerJob up to 5.1
 CVE-2025-11580 (A weakness has been identified in PowerJob up to 5.1.2. This affects t ...)
 	NOT-FOR-US: PowerJob
 CVE-2025-11579 (github.com/nwaples/rardecode versions <=2.1.1 fail to restrict the dic ...)
-	- golang-github-nwaples-rardecode <unfixed> (bug #1117936)
+	- golang-github-nwaples-rardecode 2.2.1-1 (bug #1117936)
 	NOTE: https://github.com/nwaples/rardecode/commit/52fb4e825c936636f251f7e7deded39ab11df9a9 (v2.2.0)
 CVE-2025-11190 (The Kiwire Captive Portal contains an open redirection issue via the l ...)
 	NOT-FOR-US: Kiwire Captive Portal



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a1a60d20aee8fc49338d43969177566d3b584109

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a1a60d20aee8fc49338d43969177566d3b584109
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251013/6e605b5c/attachment.htm>