Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e3dd7f9c by Salvatore Bonaccorso at 2025-04-06T10:37:48+02:00
Process some zammad CVEs, itp'ed
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -31,13 +31,13 @@ CVE-2025-32365 (Poppler before 25.04.0 allows crafted input
files to trigger out
CVE-2025-32364 (A floating-point exception in the PSStack::roll function of
Poppler be ...)
TODO: check
CVE-2025-32360 (In Zammad 6.4.x before 6.4.2, there is information exposure.
Only agen ...)
- TODO: check
+ - zammad <itp> (bug #841355)
CVE-2025-32359 (In Zammad 6.4.x before 6.4.2, there is client-side enforcement
of serv ...)
- TODO: check
+ - zammad <itp> (bug #841355)
CVE-2025-32358 (In Zammad 6.4.x before 6.4.2, SSRF can occur. Authenticated
admin user ...)
- TODO: check
+ - zammad <itp> (bug #841355)
CVE-2025-32357 (In Zammad 6.4.x before 6.4.2, an authenticated agent with
knowledge ba ...)
- TODO: check
+ - zammad <itp> (bug #841355)
CVE-2025-1264 (The Broken Link Checker by AIOSEO \u2013 Easily Fix/Monitor
Internal a ...)
NOT-FOR-US: WordPress plugin
CVE-2024-58133 (In chainmaker-go (aka ChainMaker) before 2.4.0, when making
frequent u ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e3dd7f9c976dd5e8017ade97081308416d409e3b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e3dd7f9c976dd5e8017ade97081308416d409e3b
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits