Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
1d29dbf5 by Moritz Muehlenhoff at 2026-02-25T09:54:38+01:00
trixie/bookworm triage
- - - - -
2 changed files:
- data/CVE/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -988,23 +988,28 @@ CVE-2025-61147 (strukturag libde265 commit d9fea9d wa
discovered to contain a se
NOTE: Fixed by:
https://github.com/strukturag/libde265/commit/8b17e0930f77db07f55e0b89399a8f054ddbecf7
CVE-2025-61146 (saitoha libsixel until v1.8.7 was discovered to contain a
memory leak ...)
- libsixel <unfixed>
+ [trixie] - libsixel <no-dsa> (Minor issue)
+ [bookworm] - libsixel <no-dsa> (Minor issue)
NOTE: https://github.com/saitoha/libsixel/issues/207
NOTE:
https://github.com/saitoha/libsixel/commit/e0ba6685262a3679cc5b9009c0c5b7dc8a3f262e
CVE-2025-61145 (libtiff up to v4.7.1 was discovered to contain a double free
via the c ...)
- - tiff 4.7.1-1
+ - tiff 4.7.1-1 (unimportant)
NOTE: https://gitlab.com/libtiff/libtiff/-/issues/736
NOTE: https://gitlab.com/libtiff/libtiff/-/merge_requests/753
NOTE: Fixed by:
https://gitlab.com/libtiff/libtiff/-/commit/0ac97aa7a5bffddd88f7cdbe517264e9db3f5bd5
(v4.7.1rc1)
+ NOTE: Crash in CLI tool, no security impact
CVE-2025-61144 (libtiff up to v4.7.1 was discovered to contain a stack
overflow via th ...)
- - tiff 4.7.1-1
+ - tiff 4.7.1-1 (unimportant)
NOTE: https://gitlab.com/libtiff/libtiff/-/issues/740
NOTE: https://gitlab.com/libtiff/libtiff/-/merge_requests/757
NOTE: Fixed by:
https://gitlab.com/libtiff/libtiff/-/commit/88cf9dbb48f6e172629795ecffae35d5052f68aa
(v4.7.1rc1)
+ NOTE: Crash in CLI tool, no security impact
CVE-2025-61143 (libtiff up to v4.7.1 was discovered to contain a NULL pointer
derefere ...)
- - tiff 4.7.1-1
+ - tiff 4.7.1-1 (unimportant)
NOTE: https://gitlab.com/libtiff/libtiff/-/issues/737
NOTE: https://gitlab.com/libtiff/libtiff/-/merge_requests/755
NOTE: Fixed by:
https://gitlab.com/libtiff/libtiff/-/commit/4d28af5fe61b1760f10981f5072ff1e6fd44f210
(v4.7.1rc1)
+ NOTE: Crash in CLI tool, no security impact
CVE-2025-59873 (An information exposure vulnerability exists in Vulnerability
in HCL ...)
NOT-FOR-US: HCL
CVE-2025-41002 (SQL injection vulnerability in Infoticketing. This
vulnerability allow ...)
=====================================
data/dsa-needed.txt
=====================================
@@ -34,6 +34,9 @@ gimp
--
git-lfs
--
+imagemagick
+ only some of them are important, we could also fix the more severe ones
+--
isc-kea/oldstable
--
jackson-core
@@ -54,6 +57,8 @@ node-tar
--
nodejs
--
+nss (jmm)
+--
opennds/oldstable
pinged maintainer, but no reply yet. should most probably be bumped to 10.x
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1d29dbf5471193449441a2da80240f73f68b41cc
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1d29dbf5471193449441a2da80240f73f68b41cc
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
