[Git][security-tracker-team/security-tracker][master] Add new CVEs for freshrss, itp'ed

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
40202051 by Salvatore Bonaccorso at 2025-09-30T11:25:11+02:00
Add new CVEs for freshrss, itp'ed

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -53,7 +53,7 @@ CVE-2025-61627
 CVE-2025-61626
 	REJECTED
 CVE-2025-61586 (FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and  ...)
-	TODO: check
+	- freshrss <itp> (bug #1032767)
 CVE-2025-61584 (serverless-dns is a RethinkDNS resolver that deploys to Cloudflare Wor ...)
 	TODO: check
 CVE-2025-59956 (AgentAPI is an HTTP API for Claude Code, Goose, Aider, Gemini, Amp, an ...)
@@ -63,9 +63,9 @@ CVE-2025-59954 (Knowage is an open source analytics and business intelligence su
 CVE-2025-59952 (MinIO Java SDK is a Simple Storage Service (aka S3) client to perform  ...)
 	TODO: check
 CVE-2025-59950 (FreshRSS is a free, self-hostable RSS aggregator. In versions 1.26.3 a ...)
-	TODO: check
+	- freshrss <itp> (bug #1032767)
 CVE-2025-59948 (FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and  ...)
-	TODO: check
+	- freshrss <itp> (bug #1032767)
 CVE-2025-59942 (go-f3 is a Golang implementation of Fast Finality for Filecoin (F3). I ...)
 	TODO: check
 CVE-2025-59941 (go-f3 is a Golang implementation of Fast Finality for Filecoin (F3). I ...)
@@ -81,15 +81,15 @@ CVE-2025-59668 (Multiple versions of Central Monitor CNS-6201 contain a NULL poi
 CVE-2025-59163 (vet is an open source software supply chain security tool. Versions 1. ...)
 	TODO: check
 CVE-2025-57769 (FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and  ...)
-	TODO: check
+	- freshrss <itp> (bug #1032767)
 CVE-2025-57266 (An issue was discovered in file AssistantController.java in ThriveX Bl ...)
 	TODO: check
 CVE-2025-54875 (FreshRSS is a free, self-hostable RSS aggregator. In versions 1.16.0 a ...)
-	TODO: check
+	- freshrss <itp> (bug #1032767)
 CVE-2025-54592 (FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and  ...)
-	TODO: check
+	- freshrss <itp> (bug #1032767)
 CVE-2025-54591 (FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and  ...)
-	TODO: check
+	- freshrss <itp> (bug #1032767)
 CVE-2025-45376 (Dell Repository Manager (DRM), versions 3.4.7 and 3.4.8, contains an I ...)
 	NOT-FOR-US: Dell / EMC
 CVE-2025-43820 (Multiple cross-site scripting (XSS) vulnerabilities in the Calendar wi ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/402020510e9075cbd303388f16a64b26605ea1ae

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/402020510e9075cbd303388f16a64b26605ea1ae
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250930/ece52576/attachment.htm>