Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
1d3059b4 by Salvatore Bonaccorso at 2025-11-29T10:07:27+01:00
Add CVE-2025-66034/fonttols
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -25,7 +25,9 @@ CVE-2025-66201 (LibreChat is a ChatGPT clone with additional
features. Prior to
CVE-2025-66036 (Retro is an online platform providing items of vintage
collections. Pr ...)
NOT-FOR-US: Retro
CVE-2025-66034 (fontTools is a library for manipulating fonts, written in
Python. In v ...)
- TODO: check
+ - fonttools <unfixed>
+ NOTE:
https://github.com/fonttools/fonttools/security/advisories/GHSA-768j-98cg-p3fv
+ NOTE: Fixed by:
https://github.com/fonttools/fonttools/commit/a696d5ba93270d5954f98e7cab5ddca8a02c1e32
(4.61.0)
CVE-2025-66027 (Rallly is an open-source scheduling and collaboration tool.
Prior to v ...)
NOT-FOR-US: Rallly
CVE-2025-65892 (Reflected Cross-Site Scripting (rXSS) in krpano before version
1.23.2 ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1d3059b489184a11b4d579480ead6c8bc11bcda3
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1d3059b489184a11b4d579480ead6c8bc11bcda3
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
