Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6fc52fcf by Salvatore Bonaccorso at 2025-10-28T20:42:15+01:00
Add Debian bug references for tomcat issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -383,8 +383,8 @@ CVE-2025-62263 (Multiple cross-site scripting (XSS)
vulnerabilities in Liferay P
CVE-2025-62253 (Open redirect vulnerability in page administration in Liferay
Portal 7 ...)
NOT-FOR-US: Liferay
CVE-2025-61795 (Improper Resource Shutdown or Release vulnerability in Apache
Tomcat. ...)
- - tomcat11 <unfixed>
- - tomcat10 <unfixed>
+ - tomcat11 <unfixed> (bug #1119293)
+ - tomcat10 <unfixed> (bug #1119294)
- tomcat9 9.0.70-2
NOTE: Starting with 9.0.70-2 src:tomcat9 no longer ships the server
stack, using that as the fixed version
NOTE:
https://github.com/apache/tomcat/commit/1cdf5f730ede75a0759492f179ac21ca4ff68e06
(11.0.12)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6fc52fcf37402e89e2ecc612f322a4d75ee2c564
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6fc52fcf37402e89e2ecc612f322a4d75ee2c564
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits