Sylvain Beucler pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8a67c799 by Sylvain Beucler at 2025-02-21T10:22:18+01:00
CVE-2025-1492/wireshark: bullseye not-affected
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -273,8 +273,10 @@ CVE-2025-21355 (Missing Authentication for Critical
Function in Microsoft Bing a
NOT-FOR-US: Microsoft
CVE-2025-1492 (Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0
to 4.4.3 ...)
- wireshark 4.4.4-1
+ [bullseye] - wireshark <not-affected> (Vulnerable dissector not present)
NOTE: https://www.wireshark.org/security/wnpa-sec-2025-01.html
NOTE: https://gitlab.com/wireshark/wireshark/-/issues/20373
+ NOTE: CBOR Object Signing and Encryption (COSE) dissector introduced in
3.6.0rc0
CVE-2025-1293 (Hermes versions up to 0.4.0 improperly validated the JWT
provided when ...)
TODO: check
CVE-2025-1223 (An attacker can gain application privileges in order to perform
limite ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8a67c799b3215a9c32a7eabe4037354c25fcbb30
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8a67c799b3215a9c32a7eabe4037354c25fcbb30
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
