Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
37f46c54 by Salvatore Bonaccorso at 2025-05-30T22:55:14+02:00
Process some mattermost-server issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -95,11 +95,11 @@ CVE-2025-48334 (Missing Authorization vulnerability in
BinaryCarpenter Woo Slide
CVE-2025-48331 (Insertion of Sensitive Information Into Sent Data
vulnerability in Van ...)
NOT-FOR-US: WordPress plugin
CVE-2025-3611 (Mattermost versions 10.7.x <= 10.7.0, 10.5.x <= 10.5.3, 9.11.x
<= 9.11 ...)
- TODO: check
+ - mattermost-server <itp> (bug #823556)
CVE-2025-3230 (Mattermost versions 10.7.x <= 10.7.0, 10.6.x <= 10.6.2, 10.5.x
<= 10.5 ...)
- TODO: check
+ - mattermost-server <itp> (bug #823556)
CVE-2025-2571 (Mattermost versions 10.7.x <= 10.7.0, 10.6.x <= 10.6.2, 10.5.x
<= 10.5 ...)
- TODO: check
+ - mattermost-server <itp> (bug #823556)
CVE-2025-2503 (An improper permission handling vulnerability was reported in
Lenovo P ...)
NOT-FOR-US: Lenovo
CVE-2025-2502 (An improper default permissions vulnerability was reported in
Lenovo P ...)
@@ -109,7 +109,7 @@ CVE-2025-2501 (An untrusted search path vulnerability was
reported in Lenovo PC
CVE-2025-2500 (A vulnerability exists in the SOAP Web services of the Asset
Suite ve ...)
NOT-FOR-US: Hitachi Energy
CVE-2025-1792 (Mattermost versions 10.7.x <= 10.7.0, 10.5.x <= 10.5.3, 9.11.x
<= 9.11 ...)
- TODO: check
+ - mattermost-server <itp> (bug #823556)
CVE-2025-1763 (An issue has been discovered in GitLab EE that allows for
cross-site-s ...)
TODO: check
CVE-2025-1484 (A vulnerability exists in the media upload component of the
Asset Sui ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/37f46c54e0b10fcc9432aff4ebc443496be5a4b5
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/37f46c54e0b10fcc9432aff4ebc443496be5a4b5
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
