Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
9920b9b8 by Salvatore Bonaccorso at 2025-11-14T09:51:09+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -15,13 +15,13 @@ CVE-2025-64747 (Directus is a real-time API and App
dashboard for managing SQL d
CVE-2025-64746 (Directus is a real-time API and App dashboard for managing SQL
databas ...)
NOT-FOR-US: Directus
CVE-2025-64745 (Astro is a web framework. Starting in version 5.2.0 and prior
to versi ...)
- TODO: check
+ NOT-FOR-US: Astro
CVE-2025-64744 (OpenObserve is a cloud-native observability platform. In
versions up t ...)
- TODO: check
+ NOT-FOR-US: OpenObserve
CVE-2025-64530 (Apollo Federation is an architecture for declaratively
composing APIs ...)
- TODO: check
+ NOT-FOR-US: Apollo Federation
CVE-2025-64444 (Improper neutralization of special elements used in an OS
command ('OS ...)
- TODO: check
+ NOT-FOR-US: NCP-HG100
CVE-2025-55073 (Mattermost versions 10.11.x <= 10.11.3, 10.5.x <= 10.5.11,
10.12.x <= ...)
TODO: check
CVE-2025-55070 (Mattermost versions <11 fail to enforce multi-factor
authentication on ...)
@@ -31,11 +31,11 @@ CVE-2025-4619 (A denial-of-service (DoS) vulnerability in
Palo Alto Networks PAN
CVE-2025-47913 (SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed
respons ...)
TODO: check
CVE-2025-47222 (Keyfactor SignServer before 7.3.1 has Incorrect Access
Control, issue ...)
- TODO: check
+ NOT-FOR-US: Keyfactor SignServer
CVE-2025-47221 (Keyfactor SignServer before 7.3.1 has Incorrect Access
Control, issue ...)
- TODO: check
+ NOT-FOR-US: Keyfactor SignServer
CVE-2025-47220 (Keyfactor SignServer before 7.3.1 has Incorrect Access
Control, issue ...)
- TODO: check
+ NOT-FOR-US: Keyfactor SignServer
CVE-2025-41436 (Mattermost versions <11.0 fail to properly enforce the "Allow
users to ...)
TODO: check
CVE-2025-36251 (IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service
SSL/TLS i ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9920b9b84e8ce494e8f09d8343a0d1ba56b87298
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9920b9b84e8ce494e8f09d8343a0d1ba56b87298
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
