Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
4190cead by Salvatore Bonaccorso at 2025-08-07T21:45:18+02:00
Add notes on mitigations on libxml2 for CVE-2025-7425/libxslt
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -6910,6 +6910,10 @@ CVE-2025-7425 (A flaw was found in libxslt where the
attribute type, atype, flag
- libxslt <unfixed> (bug #1109122)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2379274
NOTE: https://gitlab.gnome.org/GNOME/libxslt/-/issues/140
+ NOTE: While the issue is underlying in libxslt (and the CVE assigned
for it), a
+ NOTE: mitigation can be implemented in src:libxml2, cf.
+ NOTE: https://gitlab.gnome.org/GNOME/libxslt/-/issues/140#note_2479674
+ NOTE: and followups.
CVE-2025-7424 (A flaw was found in the libxslt library. The same memory field,
psvi, ...)
- libxslt <unfixed> (bug #1109123)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2379228
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4190cead00bee2aba55d34d49a82d052a2363e49
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4190cead00bee2aba55d34d49a82d052a2363e49
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
