Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f976a4fb by Salvatore Bonaccorso at 2025-08-29T23:15:57+02:00
Add CVE-2025-54080/exiv2
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -100,7 +100,10 @@ CVE-2025-55177 (Incomplete authorization of linked device
synchronization messag
CVE-2025-54877 (Tuleap is an Open Source Suite created to facilitate
management of sof ...)
NOT-FOR-US: Tuleap
CVE-2025-54080 (Exiv2 is a C++ library and a command-line utility to read,
write, dele ...)
- TODO: check
+ - exiv2 <unfixed>
+ NOTE:
https://github.com/Exiv2/exiv2/security/advisories/GHSA-496f-x7cq-cq39
+ NOTE: Regression test:
https://github.com/Exiv2/exiv2/commit/f2345de0ce74e4c2103a5d48d3c6f90545ecaa56
(v0.28.6)
+ NOTE: Fixed by:
https://github.com/Exiv2/exiv2/commit/f02c970ae56e6e377f7f79ba9e8edb5f2d23f48d
(v0.28.6)
CVE-2025-52861 (A path traversal vulnerability has been reported to affect
VioStor. If ...)
NOT-FOR-US: QNAP
CVE-2025-52856 (An improper authentication vulnerability has been reported to
affect V ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f976a4fbe89f9193dfcbbce5282125d0f6d23ef3
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f976a4fbe89f9193dfcbbce5282125d0f6d23ef3
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
