Markus Koschany pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
29ef5ec2 by Markus Koschany at 2025-03-31T00:58:25+02:00
CVE-2025-22870,golang-1.15: bullseye is postponed
Minor issue
- - - - -
2438ebf8 by Markus Koschany at 2025-03-31T01:02:46+02:00
Add mariadb-10.5 to dla-needed.txt
- - - - -
7c7158b5 by Markus Koschany at 2025-03-31T01:07:52+02:00
CVE-2025-29923,golang-github-go-redis-redis: bullseye is postponed
Minor issue, workaround exists
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -2826,6 +2826,7 @@ CVE-2025-29980 (A SQL injection issue has been discovered
in eTRAKiT.net release
NOT-FOR-US: eTRAKiT.net
CVE-2025-29923 (go-redis is the official Redis client library for the Go
programming l ...)
- golang-github-go-redis-redis <unfixed>
+ [bullseye] - golang-github-go-redis-redis <postponed> (Minor issue,
workaround exists)
NOTE:
https://github.com/redis/go-redis/security/advisories/GHSA-92cp-5422-2mw7
NOTE: https://github.com/redis/go-redis/pull/3295
NOTE: Fixed by:
https://github.com/redis/go-redis/commit/d236865b0cfa1b752ea4b7da666b1fdcd0acebb6
@@ -7221,6 +7222,7 @@ CVE-2025-22870 (Matching of hosts against proxy patterns
can improperly treat an
- golang-1.19 <removed>
[bookworm] - golang-1.19 <no-dsa> (Minor issue)
- golang-1.15 <removed>
+ [bullseye] - golang-1.15 <postponed> (Minor issue)
NOTE:
https://groups.google.com/g/golang-announce/c/4t3lzH3I0eI/m/b42ImqrBAQAJ
NOTE: https://github.com/golang/go/issues/71984
NOTE: Fixed by:
https://github.com/golang/go/commit/334de7982f8ec959c74470dd709ceedfd6dbd50a
(go1.24.1)
=====================================
data/dla-needed.txt
=====================================
@@ -151,6 +151,9 @@ libreoffice
linux (Ben Hutchings)
NOTE: 20230111: Perma-added, Linux package specifically delegated to bwh
(LTS Team)
--
+mariadb-10.5
+ NOTE: 20250331: Added by Front-Desk (apo)
+--
mbedtls
NOTE: 20250331: Added by Front-Desk (apo)
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/cfabb4e39cb2bd990c7afcad9c9dd9519851713c...7c7158b510ab41e0df909af346f4f1b40880ed7e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/cfabb4e39cb2bd990c7afcad9c9dd9519851713c...7c7158b510ab41e0df909af346f4f1b40880ed7e
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
