Bastien Roucariès pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
1e58340c by Bastien Roucariès at 2025-04-25T23:08:48+02:00
Correct a mistake for embed code copy jquery-validation
It is znuny package not otrs2
- - - - -
903330d6 by Bastien Roucariès at 2025-04-25T23:18:07+02:00
Add bug for CVE-2025-3573
- - - - -
2 changed files:
- data/CVE/list
- data/embedded-code-copies
Changes:
=====================================
data/CVE/list
=====================================
@@ -3714,8 +3714,8 @@ CVE-2025-3576 (A vulnerability in the MIT Kerberos
implementation allows GSSAPI-
NOTE: explicitly configured with the new allow_rc4 or allow_des3
variables respectively.
CVE-2025-3573 (Versions of the package jquery-validation before 1.20.0 are
vulnerable ...)
- civicrm <unfixed> (bug #1103445)
- - kalkun <unfixed>
- - otrs2 <unfixed>
+ - kalkun <unfixed> (bug #1104134)
+ - znuny <unfixed> (bug #1104136)
- phpmyadmin <unfixed>
NOTE: https://github.com/jquery-validation/jquery-validation/pull/2462
NOTE:
https://github.com/jquery-validation/jquery-validation/commit/7a490d8f39bd988027568ddcf51755e1f4688902
=====================================
data/embedded-code-copies
=====================================
@@ -3827,5 +3827,5 @@ xxhash
jquery-validation (not packaged in Debian, need ITP)
- civicrm <unfixed> (embed)
- kalkun <unfixed> (embed)
- - otrs2 <unfixed (embed)
+ - znuny <unfixed (embed)
- phpmyadmin <unfixed> (embed)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/bda640a7d0a5646a399ee5c2624a3b8302221db7...903330d666f8110cec1e41e23829cd9d7a80de88
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/bda640a7d0a5646a399ee5c2624a3b8302221db7...903330d666f8110cec1e41e23829cd9d7a80de88
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits