Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
de95d066 by Moritz Muehlenhoff at 2025-07-15T08:38:07+02:00
new pandoc issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -544,7 +544,10 @@ CVE-2025-52946 (A Use After Free vulnerability in the
routing protocol daemon (r
CVE-2025-52089 (A hidden remote support feature protected by a static secret
in TOTOLI ...)
NOT-FOR-US: TOTOLINK
CVE-2025-51591 (A Server-Side Request Forgery (SSRF) in JGM Pandoc v3.6.4
allows attac ...)
- TODO: check
+ - pandoc <unfixed> (unimportant)
+ NOTE: https://github.com/jgm/pandoc/issues/10682
+ NOTE:
https://github.com/jgm/pandoc/commit/67edf7ce7cd3563a180ae44bd122b012e22364f8
+ NOTE: Fix simply updates the documentation
CVE-2025-50125 (A CWE-918: Server-Side Request Forgery (SSRF) vulnerability
exists ...)
NOT-FOR-US: Schneider Electric
CVE-2025-50124 (A CWE-269: Improper Privilege Management vulnerability
exists tha ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/de95d066376aec030ee300b12874cae4b7ba26e8
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/de95d066376aec030ee300b12874cae4b7ba26e8
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
