Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e427a0d3 by Salvatore Bonaccorso at 2025-12-02T22:14:23+01:00
Add CVE-2025-65105/apptainer
- - - - -
47f166b7 by Salvatore Bonaccorso at 2025-12-02T22:14:41+01:00
Add CVE-2025-64750/singularity-container
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -40,9 +40,15 @@ CVE-2025-65187 (A Stored Cross Site Scripting vulnerability
exists in CiviCRM be
CVE-2025-65186 (Grav CMS 1.7.49 is vulnerable to Cross Site Scripting (XSS).
The page ...)
NOT-FOR-US: Grav CMS
CVE-2025-65105 (Apptainer is an open source container platform. In Apptainer
versions ...)
- TODO: check
+ - apptainer <unfixed>
+ NOTE:
https://github.com/apptainer/apptainer/security/advisories/GHSA-j3rw-fx6g-q46j
+ NOTE: Fixed by:
https://github.com/apptainer/apptainer/commit/4313b42717e18a4add7dd7503528bc15af905981
(v1.4.5)
+ NOTE: Fixed by:
https://github.com/apptainer/apptainer/commit/82f17900a0c31bc769bf9b4612d271c7068d8bf2
(v1.4.5)
CVE-2025-64750 (SingularityCE and SingularityPRO are open source container
platforms. ...)
- TODO: check
+ - singularity-container <unfixed>
+ NOTE:
https://github.com/sylabs/singularity/security/advisories/GHSA-wwrx-w7c9-rf87
+ NOTE: Fixed by:
https://github.com/sylabs/singularity/commit/5af3e790c40593591dfc26d0692e4d4b21c29ba0
+ NOTE: Fixed by:
https://github.com/sylabs/singularity/commit/27882963879a7af1699fd6511c3f5f1371d80f33
CVE-2025-64070 (Sourcecodester Student Grades Management System v1.0 is
vulnerable to ...)
NOT-FOR-US: SourceCodester
CVE-2025-63872 (DeepSeek V3.2 has a Cross Site Scripting (XSS) vulnerability,
which al ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/d87b74e9c14ab2fe5c669ac2fc2825f6f9540fa4...47f166b7aceaf2cd3c9a726aff7553ce1ef2b167
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/d87b74e9c14ab2fe5c669ac2fc2825f6f9540fa4...47f166b7aceaf2cd3c9a726aff7553ce1ef2b167
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
