Sylvain Beucler pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a53cdc5b by Sylvain Beucler at 2025-05-10T23:40:20+02:00
Typos
- - - - -
181314e4 by Sylvain Beucler at 2025-05-10T23:48:59+02:00
CVE-2025-4373/glib2.0: bullseye posptoned
We did an update only a few weeks ago.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -683,7 +683,7 @@ CVE-2025-46727 (Rack is a modular Ruby web server
interface. Prior to versions 2
- ruby-rack <unfixed> (bug #1104927)
NOTE:
https://github.com/rack/rack/security/advisories/GHSA-gjh7-p2fx-99vx
NOTE: Fixed by:
https://github.com/rack/rack/commit/cd6b70a1f2a1016b73dc906f924869f4902c2d74
(v3.1.14)
- NOTE: Fxied by:
https://github.com/rack/rack/commit/2bb5263b464b65ba4b648996a579dbd180d2b712
(v3.0.16)
+ NOTE: Fixed by:
https://github.com/rack/rack/commit/2bb5263b464b65ba4b648996a579dbd180d2b712
(v3.0.16)
NOTE: Fixed by:
https://github.com/rack/rack/commit/3f5a4249118d09d199fe480466c8c6717e43b6e3
(v2.2.14)
CVE-2025-46265 (On F5OS, an improper authorization vulnerability exists where
remotely ...)
NOT-FOR-US: F5
@@ -1505,6 +1505,7 @@ CVE-2025-4374 (A flaw was found in Quay. When an
organization acts as a proxy ca
CVE-2025-4373 (A flaw was found in GLib, which is vulnerable to an integer
overflow i ...)
- glib2.0 <unfixed> (bug #1104930)
[bookworm] - glib2.0 <no-dsa> (Minor issue)
+ [bullseye] - glib2.0 <postponed> (Minor issue, fix along with next
update)
NOTE: https://gitlab.gnome.org/GNOME/glib/-/issues/3677
NOTE: https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4588
NOTE: https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4592
@@ -289936,7 +289937,7 @@ CVE-2021-45844 (Improper sanitization in the
invocation of ODA File Converter fr
{DSA-5229-1 DLA-3076-1 DLA-2934-1}
- freecad 0.19.4+dfsg1-1 (bug #1005747)
NOTE: Fixed by;
https://github.com/FreeCAD/FreeCAD/commit/1742d7ff82af1653253c4a4183c262c9af3b26d6
(master)
- NOTE: Fxied by:
https://github.com/FreeCAD/FreeCAD/commit/ad6977f940d3e64d78a4367452d9a338ad43fa1c
(0.19.4)
+ NOTE: Fixed by:
https://github.com/FreeCAD/FreeCAD/commit/ad6977f940d3e64d78a4367452d9a338ad43fa1c
(0.19.4)
NOTE: https://tracker.freecad.org/view.php?id=4809
CVE-2021-45843 (glFusion CMS v1.7.9 is affected by a reflected Cross Site
Scripting (X ...)
NOT-FOR-US: glFusion CMS
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/9313b0cb55f4d1ffc14fa791cf0ea7fdd768a364...181314e4b94a1b30006c223fda190dd92b843f6e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/9313b0cb55f4d1ffc14fa791cf0ea7fdd768a364...181314e4b94a1b30006c223fda190dd92b843f6e
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
