Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
052a9754 by Salvatore Bonaccorso at 2025-03-17T21:32:27+01:00
Add CVE-2025-29787/rust-zip
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -63,7 +63,10 @@ CVE-2025-2199 (SQL injection vulnerability in the
Innovaci\xf3n y Cualificaci\xf
CVE-2025-29788 (The Syliud PayPal Plugin is the Sylius Core Team\u2019s plugin
for the ...)
NOT-FOR-US: Syliud PayPal Plugin
CVE-2025-29787 (`zip` is a zip library for rust which supports reading and
writing of ...)
- TODO: check
+ - rust-zip <unfixed>
+ NOTE:
https://github.com/zip-rs/zip2/security/advisories/GHSA-94vh-gphv-8pm8
+ NOTE: Fixed by:
https://github.com/zip-rs/zip2/commit/a2e062f37066c3b12860a32eb1cb44856cfb7afe
(v2.3.0)
+ TODO: check, might only be introduced in 1.3.0
CVE-2025-29786 (Expr is an expression language and expression evaluation for
Go. Prior ...)
TODO: check
CVE-2025-29431 (Code-projects Online Class and Exam Scheduling System V1.0 is
vulnerab ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/052a975459c99387213875861d094c2c696a6f81
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/052a975459c99387213875861d094c2c696a6f81
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
