Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f9ddbe46 by Moritz Muehlenhoff at 2025-03-25T16:45:12+01:00
new mbedtls issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -98,9 +98,11 @@ CVE-2025-29135 (A stack-based buffer overflow vulnerability
in Tenda AC7 V15.03.
CVE-2025-29100 (Tenda AC8 V16.03.34.06 is vulnerable to Buffer Overflow in the
fromSet ...)
NOT-FOR-US: Tenda
CVE-2025-27810 (Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of
failed ...)
- TODO: check
+ - mbedtls <unfixed>
+ NOTE:
https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-03-2/
CVE-2025-27809 (Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client
side, acce ...)
- TODO: check
+ - mbedtls <unfixed>
+ NOTE:
https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-03-1/
CVE-2025-26512 (SnapCenter versions prior to 6.0.1P1 and 6.1P1 are
susceptible to a v ...)
NOT-FOR-US: NetApp
CVE-2025-1798 (The does not sanitise and escape some parameters when
outputting them ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f9ddbe46e6db0e112a459e542a8aba74c87f0eda
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f9ddbe46e6db0e112a459e542a8aba74c87f0eda
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
