Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
1b95747e by Salvatore Bonaccorso at 2026-02-19T22:21:41+01:00
Add some new "old" spip issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -412,15 +412,19 @@ CVE-2025-71246
CVE-2025-71245
REJECTED
CVE-2025-71244 (SPIP before 4.4.5 and 4.3.9 allows an Open Redirect via the
login form ...)
- TODO: check
+ - spip 4.4.5+dfsg-1
+ NOTE:
https://blog.spip.net/Mise-a-jour-de-securite-sortie-de-SPIP-4-4-5.html
CVE-2025-71243 (The 'Saisies pour formulaire' (Saisies) plugin for SPIP
versions 5.4.0 ...)
NOT-FOR-US: SPIP plugin
CVE-2025-71242 (SPIP before 4.3.6, 4.2.17, and 4.1.20 allows unauthorized
content disc ...)
- TODO: check
+ - spip 4.3.6+dfsg-1
+ NOTE:
https://blog.spip.net/Mise-a-jour-de-securite-sortie-de-SPIP-4-3-6.html
CVE-2025-71241 (SPIP before 4.3.6, 4.2.17, and 4.1.20 allows Cross-Site
Scripting (XSS ...)
- TODO: check
+ - spip 4.3.6+dfsg-1
+ NOTE:
https://blog.spip.net/Mise-a-jour-de-securite-sortie-de-SPIP-4-3-6-SPIP-4-2-17-SPIP-4-1-20.html
CVE-2025-71240 (SPIP before 4.2.15 allows Cross-Site Scripting (XSS) via
crafted conte ...)
- TODO: check
+ - spip 4.3.0+dfsg-1
+ NOTE:
https://blog.spip.net/Mise-a-jour-de-maintenance-et-securite-sortie-de-SPIP-4-2-15.html
CVE-2025-69725 (An Open Redirect vulnerability in the go-chi/chi >=5.2.2
RedirectSlash ...)
TODO: check
CVE-2025-69674 (Buffer Overflow vulnerability in CDATA FD614GS3-R850
V3.2.7_P161006 (B ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1b95747ea233eefc518ce4f4c816c8975997f046
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1b95747ea233eefc518ce4f4c816c8975997f046
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
