Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
80f0bd09 by Salvatore Bonaccorso at 2025-01-10T18:05:25+01:00
Add Debian bug reference for CVE-2025-22145/php-nesbot-carbon
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -387,7 +387,7 @@ CVE-2025-22449 (Mattermost versions 9.11.x <= 9.11.5 fail
to enforce invite perm
CVE-2025-22445 (Mattermost versions 10.x <= 10.2 fail to accurately reflect
missing se ...)
- mattermost-server <itp> (bug #823556)
CVE-2025-22145 (Carbon is an international PHP extension for DateTime.
Application pas ...)
- - php-nesbot-carbon <unfixed>
+ - php-nesbot-carbon <unfixed> (bug #1092680)
NOTE:
https://github.com/CarbonPHP/carbon/security/advisories/GHSA-j3f9-p6hm-5w6q
NOTE:
https://github.com/briannesbitt/Carbon/commit/129700ed449b1f02d70272d2ac802357c8c30c58
(3.8.4)
NOTE:
https://github.com/briannesbitt/Carbon/commit/1e9d50601e7035a4c61441a208cb5bed73e108c5
(2.72.6)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/80f0bd09bcb310ebcbebfe8034469369224877e5
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/80f0bd09bcb310ebcbebfe8034469369224877e5
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
