Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
88964a7d by Salvatore Bonaccorso at 2025-12-25T09:20:13+01:00
Add Debian bug reference for CVE-2025-68617/fluidsynth
- - - - -
0e6679d7 by Salvatore Bonaccorso at 2025-12-25T09:20:15+01:00
Add Debian bug reference for new openexr issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1790,7 +1790,7 @@ CVE-2025-68665 (LangChain is a framework for building
LLM-powered applications.
CVE-2025-68664 (LangChain is a framework for building agents and LLM-powered
applicati ...)
NOT-FOR-US: LangChain
CVE-2025-68617 (FluidSynth is a software synthesizer based on the SoundFont 2
specific ...)
- - fluidsynth <unfixed>
+ - fluidsynth <unfixed> (bug #1123964)
NOTE:
https://github.com/FluidSynth/fluidsynth/security/advisories/GHSA-ffw2-xvvp-39ch
NOTE: https://github.com/FluidSynth/fluidsynth/issues/1717
NOTE: https://github.com/FluidSynth/fluidsynth/issues/1728
@@ -2004,12 +2004,12 @@ CVE-2025-13698 (Deciso OPNsense diag_backup.php
filename Directory Traversal Arb
CVE-2025-13407 (The Gravity Forms WordPress plugin before 2.9.23.1 does not
properly p ...)
NOT-FOR-US: WordPress plugin
CVE-2025-12840 (Academy Software Foundation OpenEXR EXR File Parsing
Heap-based Buffer ...)
- - openexr <unfixed>
+ - openexr <unfixed> (bug #1123963)
NOTE: https://www.zerodayinitiative.com/advisories/ZDI-25-991/
NOTE:
https://lists.aswf.io/g/openexr-dev/topic/openexr_v3_4_3_is_staged_for/116040425
TODO: check details
CVE-2025-12839 (Academy Software Foundation OpenEXR EXR File Parsing
Heap-based Buffer ...)
- - openexr <unfixed>
+ - openexr <unfixed> (bug #1123963)
NOTE: https://www.zerodayinitiative.com/advisories/ZDI-25-990/
NOTE:
https://lists.aswf.io/g/openexr-dev/topic/openexr_v3_4_3_is_staged_for/116040425
CVE-2025-12838 (MSP360 Free Backup Link Following Local Privilege Escalation
Vulnerabi ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/f047424296fb8e008b592eb0933b9d5fedec1640...0e6679d7bf00a7628b1a64a9701e2342eead2452
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/f047424296fb8e008b592eb0933b9d5fedec1640...0e6679d7bf00a7628b1a64a9701e2342eead2452
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
