Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
8e8599e3 by Salvatore Bonaccorso at 2025-11-12T22:29:51+01:00
Add CVE-2025-57812/{libcupsfilters,cups-filters}
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -72,7 +72,18 @@ CVE-2025-59088 (If kdcproxy receives a request for a realm
which does not have s
- python-kdcproxy <unfixed>
NOTE: https://github.com/latchset/kdcproxy/pull/68
CVE-2025-57812 (CUPS is a standards-based, open-source printing system, and
`libcupsfi ...)
- TODO: check
+ - libcupsfilters <unfixed>
+ - cups-filters <unfixed>
+ NOTE: https://www.openwall.com/lists/oss-security/2025/11/12/1
+ NOTE:
https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-jpxg-qc2c-hgv4
+ NOTE:
https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-rc6w-jmvv-v7gx
+ NOTE:
https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-fmvr-45mx-43c6
+ NOTE: Fixed by:
https://github.com/OpenPrinting/libcupsfilters/commit/b69dfacec7f176281782e2f7ac44f04bf9633cfa
+ NOTE: Fixed by:
https://github.com/OpenPrinting/cups-filters/commit/5122052dd8f06949242099401c59f6c3b14e61c3
+ NOTE: Fixed by:
https://github.com/OpenPrinting/cups-filters/commit/cb927006747b797aa9163cd0cbd41b9bbdf05db0
+ NOTE: Fixed by:
https://github.com/OpenPrinting/cups-filters/commit/719c557c9a29db32b855e6e108d7f4e7c5397613
+ NOTE: Fixed by:
https://github.com/OpenPrinting/cups-filters/commit/7bd588a1fc5c99ac0b1951beb1b54b438137a7b5
+ NOTE: Fixed by:
https://github.com/OpenPrinting/cups-filters/commit/5e5f1c5d46a043c57cbbe6e043aa95896d9c40fa
CVE-2025-57310 (A Cross-Site Request Forgery (CSRF) vulnerability in
Salmen2/Simple-Fa ...)
TODO: check
CVE-2025-56385 (A SQL injection vulnerability exists in the login
functionality of Wel ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8e8599e360f0fe136ab3216e1837dbeb3b29f97c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8e8599e360f0fe136ab3216e1837dbeb3b29f97c
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
