Sylvain Beucler pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0613f20d by Sylvain Beucler at 2026-09-14T15:42:20+02:00
CVE-2025-57106,CVE-2025-57106,CVE-2025-57108,CVE-2025-57109/vtk9: precise LTS
triage
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -204512,20 +204512,20 @@ CVE-2025-58152 (FutureNet MA and IP-K series
provided by Century Systems Co., Lt
CVE-2025-57108 (Kitware VTK (Visualization Toolkit) through 9.5.0 contains a
heap use- ...)
- vtk9 <unfixed> (bug #1119823)
[trixie] - vtk9 <no-dsa> (Minor issue)
- [bookworm] - vtk9 <no-dsa> (Minor issue)
- [bullseye] - vtk9 <postponed> (Minor issue)
+ [bookworm] - vtk9 <postponed> (Minor issue, UAF when importing
malicious 3D models)
+ [bullseye] - vtk9 <postponed> (Minor issue, UAF when importing
malicious 3D models)
NOTE: https://gitlab.kitware.com/vtk/vtk/-/issues/19736
CVE-2025-57107 (Kitware VTK (Visualization Toolkit) through 9.5.0 contains a
heap buff ...)
- vtk9 <unfixed> (bug #1119822)
[trixie] - vtk9 <no-dsa> (Minor issue)
- [bookworm] - vtk9 <no-dsa> (Minor issue)
- [bullseye] - vtk9 <postponed> (Minor issue)
+ [bookworm] - vtk9 <postponed> (Minor issue, OOB read)
+ [bullseye] - vtk9 <postponed> (Minor issue, OOB read)
NOTE: https://gitlab.kitware.com/vtk/vtk/-/issues/19732
CVE-2025-57106 (Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable
to Buffe ...)
- vtk9 <unfixed> (bug #1119821)
[trixie] - vtk9 <no-dsa> (Minor issue)
- [bookworm] - vtk9 <no-dsa> (Minor issue)
- [bullseye] - vtk9 <postponed> (Minor issue)
+ [bookworm] - vtk9 <postponed> (Minor issue, OOB read)
+ [bullseye] - vtk9 <postponed> (Minor issue, OOB read)
NOTE: https://gitlab.kitware.com/vtk/vtk/-/issues/19733
NOTE: https://gitlab.kitware.com/vtk/vtk/-/issues/19734
CVE-2025-54763 (FutureNet MA and IP-K series provided by Century Systems Co.,
Ltd. con ...)
@@ -204889,8 +204889,8 @@ CVE-2025-5342 (Zohocorp ManageEngine Exchange
Reporter Plus through 5721 are vul
CVE-2025-57109 (Kitware VTK (Visualization Toolkit) 9.5.0 is vulnerable to
Heap Use-Af ...)
- vtk9 <unfixed> (bug #1119824)
[trixie] - vtk9 <no-dsa> (Minor issue)
- [bookworm] - vtk9 <no-dsa> (Minor issue)
- [bullseye] - vtk9 <postponed> (Minor issue)
+ [bookworm] - vtk9 <postponed> (Minor issue, UAF when importing
malicious 3D models)
+ [bullseye] - vtk9 <postponed> (Minor issue, UAF when importing
malicious 3D models)
NOTE: https://gitlab.kitware.com/vtk/vtk/-/issues/19735
CVE-2025-56313 (A Reflected Cross-Site Scripting (XSS) vulnerability was
discovered in ...)
NOT-FOR-US: JATOS
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0613f20dff6cdab8630d6c4de7bb4b1ccd5c807b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0613f20dff6cdab8630d6c4de7bb4b1ccd5c807b
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
