Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
dac74f2e by Salvatore Bonaccorso at 2026-10-12T20:17:42+02:00
Update status for some miniflux issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -315649,7 +315649,9 @@ CVE-2025-31486 (Vite is a frontend tooling framework
for javascript. The content
CVE-2025-31485 (API Platform Core is a system to create hypermedia-driven REST
and Gra ...)
NOT-FOR-US: API Platform Core
CVE-2025-31483 (Miniflux is a feed reader. Due to a weak Content Security
Policy on th ...)
- NOT-FOR-US: Miniflux
+ - miniflux 2.2.12-1
+ NOTE:
https://github.com/miniflux/v2/security/advisories/GHSA-cq88-842x-2jhp
+ NOTE: Fixed by:
https://github.com/miniflux/v2/commit/cb695e653a08af4cabcb277c271ce74bd0c746e6
(2.2.7)
CVE-2025-31481 (API Platform Core is a system to create hypermedia-driven REST
and Gra ...)
NOT-FOR-US: API Platform Core
CVE-2025-31468 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
@@ -496373,9 +496375,15 @@ CVE-2023-27594 (Cilium is a networking,
observability, and security solution wit
CVE-2023-27593 (Cilium is a networking, observability, and security solution
with an e ...)
- cilium <itp> (bug #858303)
CVE-2023-27592 (Miniflux is a feed reader. Since v2.0.25, Miniflux will
automatically ...)
- NOT-FOR-US: Miniflux
+ - miniflux <not-affected> (Fixed before initial upload to Debian)
+ NOTE:
https://github.com/miniflux/v2/security/advisories/GHSA-mqqg-xjhj-wfgw
+ NOTE: https://github.com/miniflux/v2/pull/1746
+ NOTE: Fixed by:
https://github.com/miniflux/v2/commit/eb9508502c97c1341b8120916e34b260824cc52d
(2.0.43)
CVE-2023-27591 (Miniflux is a feed reader. Prior to version 2.0.43, an
unauthenticated ...)
- NOT-FOR-US: Miniflux
+ - miniflux <not-affected> (Fixed before initial upload to Debian)
+ NOTE:
https://github.com/miniflux/v2/security/advisories/GHSA-3qjf-qh38-x73v
+ NOTE: https://github.com/miniflux/v2/pull/1745
+ NOTE: Fixed by:
https://github.com/miniflux/v2/commit/b46b5dfb2aa3a1f5320a7a3420b9186bb8fc655f
(2.0.43)
CVE-2023-27590 (Rizin is a UNIX-like reverse engineering framework and
command-line to ...)
NOT-FOR-US: Rizin
CVE-2023-27589 (Minio is a Multi-Cloud Object Storage framework. Starting with
RELEASE ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dac74f2e58b9d5945199fa97b47234500c9bac3a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dac74f2e58b9d5945199fa97b47234500c9bac3a
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
