[Git][security-tracker-team/security-tracker][master] new asterisk issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
dc644460 by Moritz Muehlenhoff at 2025-09-23T15:31:05+02:00
new asterisk issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -70,7 +70,9 @@ CVE-2025-42907 (SAP BI Platform allows an attacker to modify the IP address of t
 CVE-2025-26399 (SolarWinds Web Help Desk was found to be susceptible to an unauthentic ...)
 	NOT-FOR-US: SolarWinds
 CVE-2025-1131 (A local privilege escalation vulnerability exists in the safe_asterisk ...)
-	TODO: check
+	- asterisk <unfixed>
+	NOTE: https://github.com/asterisk/asterisk/security/advisories/GHSA-v9q8-9j8m-5xwp
+	NOTE: https://github.com/asterisk/asterisk/commit/f97361952023625e8dd49ca03454777fad19fedb (23.0.0-pre1)
 CVE-2025-10848 (A vulnerability was identified in Campcodes Society Membership Informa ...)
 	NOT-FOR-US: Campcodes
 CVE-2025-10846 (A vulnerability was determined in Portabilis i-Educar up to 2.10. This ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dc644460eaa701338dc62aa21bf1cf0485536529

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dc644460eaa701338dc62aa21bf1cf0485536529
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250923/99c79f4e/attachment-0001.htm>