Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f2ea15cd by Salvatore Bonaccorso at 2025-12-02T17:57:56+01:00
Update status for CVE-2025-64076
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2717,7 +2717,8 @@ CVE-2025-64076 (Multiple vulnerabilities exist in cbor2
through version 5.7.0 in
[bullseye] - cbor2 <not-affected> (Vulnerable code introduced later)
NOTE: https://github.com/agronholm/cbor2/issues/264
NOTE: https://github.com/agronholm/cbor2/pull/265
- NOTE:
https://github.com/agronholm/cbor2/commit/2349197bea8ebd1bf57a68f4a6549d8fd7585e66
(5.7.1)
+ NOTE: Introduced with:
https://github.com/agronholm/cbor2/commit/387755eacf0be35591a478d3c67fe10618a6d542
(5.6.0)
+ NOTE: Fixed by:
https://github.com/agronholm/cbor2/commit/2349197bea8ebd1bf57a68f4a6549d8fd7585e66
(5.7.1)
CVE-2025-63994 (An arbitrary file upload vulnerability in the
/php/UploadHandler.php c ...)
NOT-FOR-US: RichFilemanager
CVE-2025-63955 (A Cross-Site Request Forgery (CSRF) vulnerability in the
manage-studen ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f2ea15cd9b490d4edc3209b6b0b84a5f3de3467b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f2ea15cd9b490d4edc3209b6b0b84a5f3de3467b
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
