Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
4b701e55 by Salvatore Bonaccorso at 2025-12-24T09:43:19+01:00
Add new OpenEXR issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -225,13 +225,19 @@ CVE-2025-13698 (Deciso OPNsense diag_backup.php filename
Directory Traversal Arb
CVE-2025-13407 (The Gravity Forms WordPress plugin before 2.9.23.1 does not
properly p ...)
NOT-FOR-US: WordPress plugin
CVE-2025-12840 (Academy Software Foundation OpenEXR EXR File Parsing
Heap-based Buffer ...)
- TODO: check
+ - openexr <unfixed>
+ NOTE: https://www.zerodayinitiative.com/advisories/ZDI-25-991/
+ TODO: check details
CVE-2025-12839 (Academy Software Foundation OpenEXR EXR File Parsing
Heap-based Buffer ...)
- TODO: check
+ - openexr <unfixed>
+ NOTE: https://www.zerodayinitiative.com/advisories/ZDI-25-990/
+ TODO: check details
CVE-2025-12838 (MSP360 Free Backup Link Following Local Privilege Escalation
Vulnerabi ...)
TODO: check
CVE-2025-12495 (Academy Software Foundation OpenEXR EXR File Parsing
Heap-based Buffer ...)
- TODO: check
+ - openexr <unfixed>
+ NOTE: https://www.zerodayinitiative.com/advisories/ZDI-25-989/
+ TODO: check details
CVE-2025-12491 (Senstar Symphony FetchStoredLicense Information Disclosure
Vulnerabili ...)
TODO: check
CVE-2024-58335 (OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89
allows XX ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4b701e554f4ba49f06bf113542b9307c4732f627
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4b701e554f4ba49f06bf113542b9307c4732f627
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
