Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
15af1069 by Salvatore Bonaccorso at 2025-11-18T21:20:39+01:00
Add CVE-2025-64076/cbor2
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -15,7 +15,10 @@ CVE-2025-6670 (A Cross-Site Request Forgery (CSRF)
vulnerability exists in multi
CVE-2025-64996 (In Checkmk versions prior to 2.4.0p16, 2.3.0p41, and all
versions of 2 ...)
TODO: check
CVE-2025-64076 (Multiple vulnerabilities exist in cbor2 through version 5.7.0
in the d ...)
- TODO: check
+ - cbor2 5.7.1-1
+ NOTE: https://github.com/agronholm/cbor2/issues/264
+ NOTE: https://github.com/agronholm/cbor2/pull/265
+ NOTE:
https://github.com/agronholm/cbor2/commit/2349197bea8ebd1bf57a68f4a6549d8fd7585e66
(5.7.1)
CVE-2025-63994 (An arbitrary file upload vulnerability in the
/php/UploadHandler.php c ...)
TODO: check
CVE-2025-63955 (A Cross-Site Request Forgery (CSRF) vulnerability in the
manage-studen ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/15af10691f94d41723de3e3edba385109d0d8525
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/15af10691f94d41723de3e3edba385109d0d8525
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
