Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
efd3e383 by Salvatore Bonaccorso at 2025-04-03T20:28:15+02:00
Update status on CVE-2025-31115/xz-utils
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,5 +1,6 @@
-CVE-2025-31115
+CVE-2025-31115 [Threaded decoder frees memory too early]
- xz-utils <unfixed>
+ [bullseye] - xz-utils <not-affected> (Vulnerable code introduce later)
NOTE: https://www.openwall.com/lists/oss-security/2025/04/03/1
NOTE: https://tukaani.org/xz/threaded-decoder-early-free.html
NOTE:
https://github.com/tukaani-project/xz/security/advisories/GHSA-6cc8-p5mm-29w2
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/efd3e383e6359c1303dcf4914f6f22b0cb0e2fa0
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/efd3e383e6359c1303dcf4914f6f22b0cb0e2fa0
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
