Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
1493a4c6 by Moritz Muehlenhoff at 2025-11-11T20:27:06+01:00
add sudo-rs CVEs to DSA entry
- - - - -
2 changed files:
- data/CVE/list
- data/DSA/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -417,12 +417,10 @@ CVE-2025-12155 (A Command Injection vulnerability,
resulting from improper file
TODO: check
CVE-2025-64170 [GHSA-c978-wq47-pvvw]
- rust-sudo-rs 0.2.10-1
- [trixie] - rust-sudo-rs 0.2.5-5+deb13u1
NOTE:
https://github.com/trifectatechfoundation/sudo-rs/security/advisories/GHSA-c978-wq47-pvvw
NOTE: Fixed by:
https://github.com/trifectatechfoundation/sudo-rs/commit/0926e85913f45937a32b282c0757bc902dbb1e0c
(v0.2.10)
CVE-2025-64517 [GHSA-q428-6v73-fc4q]
- rust-sudo-rs 0.2.10-1
- [trixie] - rust-sudo-rs 0.2.5-5+deb13u1
NOTE:
https://github.com/trifectatechfoundation/sudo-rs/security/advisories/GHSA-q428-6v73-fc4q
NOTE: Fixed by:
https://github.com/trifectatechfoundation/sudo-rs/commit/0e3d3837aec3ee9fb5dcb8bfe11e8adb367f58f4
(v0.2.10)
CVE-2025-62689 (NULL pointer dereference vulnerability exists in GNU
libmicrohttpd v1. ...)
=====================================
data/DSA/list
=====================================
@@ -1,4 +1,5 @@
[11 Nov 2025] DSA-6052-1 rust-sudo-rs - security update
+ {CVE-2025-64170 CVE-2025-64171}
[trixie] - rust-sudo-rs 0.2.5-5+deb13u1
[10 Nov 2025] DSA-6051-1 incus - security update
{CVE-2025-64507}
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1493a4c64cadd2d7851da634e10784c20f0d06ea
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1493a4c64cadd2d7851da634e10784c20f0d06ea
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
