Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
06ff69db by Moritz Muehlenhoff at 2025-03-06T09:20:06+01:00
new jinja2 issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -7,7 +7,9 @@ CVE-2025-27623 (Jenkins 2.499 and earlier, LTS 2.492.1 and
earlier does not reda
CVE-2025-27622 (Jenkins 2.499 and earlier, LTS 2.492.1 and earlier does not
redact enc ...)
NOT-FOR-US: Jenkins (core or plugin)
CVE-2025-27516 (Jinja is an extensible templating engine. Prior to 3.1.6, an
oversight ...)
- TODO: check
+ - jinja2 <unfixed>
+ NOTE:
https://github.com/pallets/jinja/security/advisories/GHSA-cpwx-vrp4-4pq7
+ NOTE:
https://github.com/pallets/jinja/commit/90457bbf33b8662926ae65cdde4c4c32e756e403
(v3.1.6)
CVE-2025-27508 (Emissary is a P2P based data-driven workflow engine. The
ChecksumCalcu ...)
TODO: check
CVE-2025-25634 (A vulnerability has been found in Tenda AC15 15.03.05.19 in
the functi ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/06ff69dbd95a87e505bc23a58e374f619ebfc802
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/06ff69dbd95a87e505bc23a58e374f619ebfc802
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
