Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
256fc4a0 by Moritz Muehlenhoff at 2025-06-27T09:29:47+02:00
new cloud-init issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -140,13 +140,18 @@ CVE-2025-30131 (An issue was discovered on IROAD Dashcam
FX2 devices. An unauthe
CVE-2025-29331 (An issue in MHSanaei 3x-ui before v.2.5.3 and before allows a
remote a ...)
TODO: check
CVE-2024-6174 (When a non-x86 platform is detected, cloud-init grants root
access to ...)
- TODO: check
+ - cloud-init <unfixed>
+ NOTE:
https://github.com/canonical/cloud-init/commit/f43937f0b462734eb9c76700491c18fe4133c8e1
+ NOTE: https://github.com/advisories/GHSA-w8g9-wp36-fchj
CVE-2024-56915 (Netbox Community v4.1.7 and fixed in v.4.2.2 is vulnerable to
Cross Si ...)
- netbox <itp> (bug #1017079)
CVE-2024-52928 (Arc before 1.26.1 on Windows has a bypass issue in the site
settings t ...)
TODO: check
CVE-2024-11584 (cloud-initthrough 25.1.2 includes the systemd socket
unitcloud-init-ho ...)
- TODO: check
+ - cloud-init <unfixed>
+ NOTE:
https://github.com/canonical/cloud-init/commit/8b45006c4765fd75f20ce244571b563dbc49d4f2
+ NOTE: https://github.com/canonical/cloud-init/pull/6265
+ NOTE: https://github.com/advisories/GHSA-3xmh-hrxh-fx8j
CVE-2025-6669 (A vulnerability was found in gooaclok819 sublinkX up to 1.8. It
has be ...)
NOT-FOR-US: gooaclok819 sublinkX
CVE-2025-6668 (A vulnerability was found in code-projects Inventory Management
System ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/256fc4a02b2792b9b2e1b1516bae80bad993c145
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/256fc4a02b2792b9b2e1b1516bae80bad993c145
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
