[Git][security-tracker-team/security-tracker][master] Mark CVE-2025-9648 as no-dsa
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri Oct 17 20:06:44 BST 2025
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
5503dd56 by Salvatore Bonaccorso at 2025-10-17T21:05:38+02:00
Mark CVE-2025-9648 as no-dsa
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -7188,6 +7188,8 @@ CVE-2024-58040 (Crypt::RandomEncryption for Perl version 0.01 uses insecure rand
NOT-FOR-US: Crypt::RandomEncryption Perl module
CVE-2025-9648 (A vulnerability in the CivetWeb library's function mg_handle_form_requ ...)
- civetweb <unfixed>
+ [trixie] - civetweb <no-dsa> (Minor issue)
+ [bookworm] - civetweb <no-dsa> (Minor issue)
[bullseye] - civetweb <postponed> (minor issue; DoS)
NOTE: https://github.com/civetweb/civetweb/issues/1348
NOTE: https://github.com/civetweb/civetweb/commit/782e18903515f43bafbf2e668994e82bdfa51133
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5503dd56493d7fb7868f551824fadb5e5f822cd8
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5503dd56493d7fb7868f551824fadb5e5f822cd8
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251017/2475f121/attachment.htm>
More information about the debian-security-tracker-commits
mailing list