Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2747f1a6 by Salvatore Bonaccorso at 2025-03-05T21:28:38+01:00
Add CVE-2025-27515/php-laravel-framework
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3,7 +3,9 @@ CVE-2025-2003 (Incorrect authorization in PAM vaults in
Devolutions Server 2024.
CVE-2025-27517 (Volt is an elegantly crafted functional API for Livewire.
Malicious, u ...)
NOT-FOR-US: Volt API for Livewire
CVE-2025-27515 (Laravel is a web application framework. When using wildcard
validation ...)
- TODO: check
+ - php-laravel-framework <unfixed>
+ NOTE:
https://github.com/laravel/framework/security/advisories/GHSA-78fx-h6xr-vch4
+ NOTE:
https://github.com/laravel/framework/commit/2d133034fefddfb047838f4caca3687a3ba811a5
(v12.1.1)
CVE-2025-27513 (OpenTelemetry dotnet is a dotnet telemetry framework. A
vulnerability ...)
NOT-FOR-US: OpenTelemetry dotnet
CVE-2025-27497 (OpenDJ is an LDAPv3 compliant directory service. OpenDJ prior
to 4.9.3 ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2747f1a6231bf68f0e8d8e98beb918ced856650a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2747f1a6231bf68f0e8d8e98beb918ced856650a
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
