[Git][security-tracker-team/security-tracker][master] add expat fixes
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Tue Sep 16 21:56:53 BST 2025
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
5df72a87 by Moritz Muehlenhoff at 2025-09-16T22:56:32+02:00
add expat fixes
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2203,6 +2203,25 @@ CVE-2025-59375 (libexpat in Expat before 2.7.2 allows attackers to trigger large
- expat 2.7.2-1 (bug #1115298)
NOTE: https://github.com/libexpat/libexpat/issues/1018
NOTE: https://github.com/libexpat/libexpat/pull/1034
+ NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/0872c189db6e457084fca335662a9cb49e8ec4c7 (R_2_7_2)
+ NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/8768dadae479d9f2e984b747fb2ba79bb78de94f (R_2_7_2)
+ NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/4fc6f1ee9f2b282cfe446bf645c992e37f8c3e15 (R_2_7_2)
+ NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/51487ad9d760faa4809b0f8e189d2f666317e41a (R_2_7_2)
+ NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/4e7a5d03daf672f20c73d40dc8970385c18b30d3 (R_2_7_2)
+ NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/53a3eda0ae2e0317afd071b72b41976053d82732 (R_2_7_2)
+ NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/b3f0bda5f5e979781469532f7c304f7e223568d5 (R_2_7_2)
+ NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/20b4c2ee4554e3f261c2fe93fe5759a7e66c17a4 (R_2_7_2)
+ NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/1270e5bc0836d296ac4970fc9e1cf53d83972083 (R_2_7_2)
+ NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/cfce28e171676fe6f70d17b97ed8a59eaeb83f15 (R_2_7_2)
+ NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/7e35240dc97e9fd4f609e31f27c27b659535e436 (R_2_7_2)
+ NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/ae4086198d710a62a0a1560007b81307dba72909 (R_2_7_2)
+ NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/96c7467281c72028aada525c1d3822512758b266 (R_2_7_2)
+ NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/78366891a586f293aeff60a14a55e4afe1169586 (R_2_7_2)
+ NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/31f9053c3c46741f4daf2ea2bdea75f40f720d42 (R_2_7_2)
+ NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/5ae51be57ed0ca1e87582881d07ea9c29c4f7c05 (R_2_7_2)
+ NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/a6a2a49367f03f5d8a73c9027b45b59953ca27d8 (R_2_7_2)
+ NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/d6246c31a1238d065b4d9690d3bac740326f6485 (R_2_7_2)
+ NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/a21a3a8299e1ee0b0ae5ae2886a0746d088cf135 (R_2_7_2)
CVE-2025-59364 (The express-xss-sanitizer (aka Express XSS Sanitizer) package through ...)
NOT-FOR-US: Node express-xss-sanitizer
CVE-2025-41713 (During a short time frame while the device is booting an unauthenticat ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5df72a8746c197d9e9cbf12dbb913e672ca39f42
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5df72a8746c197d9e9cbf12dbb913e672ca39f42
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250916/8b64c918/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list