Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d77e7e04 by Salvatore Bonaccorso at 2025-09-24T22:55:22+02:00
Add CVE-2025-59343/node-tar-fs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -18,7 +18,9 @@ CVE-2025-59525 (Horilla is a free and open source Human
Resource Management Syst
CVE-2025-59524 (Horilla is a free and open source Human Resource Management
System (HR ...)
NOT-FOR-US: Horilla
CVE-2025-59343 (tar-fs provides filesystem bindings for tar-stream. Versions
prior to ...)
- TODO: check
+ - node-tar-fs <unfixed>
+ NOTE:
https://github.com/mafintosh/tar-fs/security/advisories/GHSA-vj76-c3g6-qr5v
+ NOTE:
https://github.com/mafintosh/tar-fs/commit/0bd54cdf06da2b7b5b95cd4b062c9f4e0a8c4e09
(v3.1.1)
CVE-2025-59305 (Improper authorization in the background migration endpoints
of Langfu ...)
NOT-FOR-US: Langfuse
CVE-2025-59251 (Microsoft Edge (Chromium-based) Remote Code Execution
Vulnerability)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d77e7e04b2faf79943aefed5ae1cc66d51c6fcf4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d77e7e04b2faf79943aefed5ae1cc66d51c6fcf4
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
