Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 5b9adbb0 by Salvatore Bonaccorso at 2025-06-01T20:57:04+02:00 Track fixed version for CVE-2025-40908/libyaml-libyaml-perl - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,10 @@ +CVE-2025-40908 [uses 2-args open, allowing existing files to be modified] + - libyaml-libyaml-perl 0.903.0+ds-1 + NOTE: https://lists.security.metacpan.org/cve-announce/msg/30071726/ + NOTE: https://github.com/ingydotnet/yaml-libyaml-pm/issues/120 + NOTE: https://github.com/ingydotnet/yaml-libyaml-pm/pull/121 + NOTE: Fixed by: https://github.com/ingydotnet/yaml-libyaml-pm/commit/5fe9daed726c06900c3cd41a739460057bec6dc3 (v0.903.0) + NOTE: https://github.com/ingydotnet/yaml-libyaml-pm/pull/122 CVE-2025-5390 (A vulnerability, which was classified as critical, was found in JeeWMS ...) NOT-FOR-US: JeeWMS CVE-2025-5389 (A vulnerability, which was classified as critical, has been found in J ...) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5b9adbb0a72190eeee992e4d9f436b1497d13d6f -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5b9adbb0a72190eeee992e4d9f436b1497d13d6f You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
