[Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-15666/assimp

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
358d3589 by Salvatore Bonaccorso at 2026-09-22T07:14:44+02:00
Update status for CVE-2025-15666/assimp

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -91453,6 +91453,8 @@ CVE-2025-15666 (A security vulnerability has been detected in Open Asset Import
 	[bookworm] - assimp <postponed> (Minor issue, revisit when fixed upstream)
 	[bullseye] - assimp <postponed> (Minor issue, revisit when fixed upstream)
 	NOTE: https://github.com/assimp/assimp/issues/6079
+	NOTE: https://github.com/assimp/assimp/pull/6869
+	NOTE: Fixed by: https://github.com/assimp/assimp/commit/a4eff9f89585c590d7b43daf5065f7bdf398bbc6
 CVE-2025-12530 (IBM watsonx.data intelligence 5.2.2, 5.3.0, 5.3.1, 5.3.1 through Patch ...)
 	NOT-FOR-US: IBM
 CVE-2026-56016 (CGI::Session::ID::md5 versions before 4.49 for Perl generate predictab ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/358d358914f2cb081567580fa7b3ed21f9ec7dcf

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/358d358914f2cb081567580fa7b3ed21f9ec7dcf
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260922/69f6980c/attachment.htm>