Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
40202051 by Salvatore Bonaccorso at 2025-09-30T11:25:11+02:00
Add new CVEs for freshrss, itp'ed
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -53,7 +53,7 @@ CVE-2025-61627
CVE-2025-61626
REJECTED
CVE-2025-61586 (FreshRSS is a free, self-hostable RSS aggregator. Versions
1.26.3 and ...)
- TODO: check
+ - freshrss <itp> (bug #1032767)
CVE-2025-61584 (serverless-dns is a RethinkDNS resolver that deploys to
Cloudflare Wor ...)
TODO: check
CVE-2025-59956 (AgentAPI is an HTTP API for Claude Code, Goose, Aider, Gemini,
Amp, an ...)
@@ -63,9 +63,9 @@ CVE-2025-59954 (Knowage is an open source analytics and
business intelligence su
CVE-2025-59952 (MinIO Java SDK is a Simple Storage Service (aka S3) client to
perform ...)
TODO: check
CVE-2025-59950 (FreshRSS is a free, self-hostable RSS aggregator. In versions
1.26.3 a ...)
- TODO: check
+ - freshrss <itp> (bug #1032767)
CVE-2025-59948 (FreshRSS is a free, self-hostable RSS aggregator. Versions
1.26.3 and ...)
- TODO: check
+ - freshrss <itp> (bug #1032767)
CVE-2025-59942 (go-f3 is a Golang implementation of Fast Finality for Filecoin
(F3). I ...)
TODO: check
CVE-2025-59941 (go-f3 is a Golang implementation of Fast Finality for Filecoin
(F3). I ...)
@@ -81,15 +81,15 @@ CVE-2025-59668 (Multiple versions of Central Monitor
CNS-6201 contain a NULL poi
CVE-2025-59163 (vet is an open source software supply chain security tool.
Versions 1. ...)
TODO: check
CVE-2025-57769 (FreshRSS is a free, self-hostable RSS aggregator. Versions
1.26.3 and ...)
- TODO: check
+ - freshrss <itp> (bug #1032767)
CVE-2025-57266 (An issue was discovered in file AssistantController.java in
ThriveX Bl ...)
TODO: check
CVE-2025-54875 (FreshRSS is a free, self-hostable RSS aggregator. In versions
1.16.0 a ...)
- TODO: check
+ - freshrss <itp> (bug #1032767)
CVE-2025-54592 (FreshRSS is a free, self-hostable RSS aggregator. Versions
1.26.3 and ...)
- TODO: check
+ - freshrss <itp> (bug #1032767)
CVE-2025-54591 (FreshRSS is a free, self-hostable RSS aggregator. Versions
1.26.3 and ...)
- TODO: check
+ - freshrss <itp> (bug #1032767)
CVE-2025-45376 (Dell Repository Manager (DRM), versions 3.4.7 and 3.4.8,
contains an I ...)
NOT-FOR-US: Dell / EMC
CVE-2025-43820 (Multiple cross-site scripting (XSS) vulnerabilities in the
Calendar wi ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/402020510e9075cbd303388f16a64b26605ea1ae
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/402020510e9075cbd303388f16a64b26605ea1ae
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
