Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8f55fc5d by Salvatore Bonaccorso at 2025-12-10T22:22:08+01:00
Add CVE-2025-66004/usbmuxd
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -26,7 +26,10 @@ CVE-2025-66675 (Denial of Service vulnerability in Apache
Struts, file leak in m
- libstruts1.2-java <removed>
NOTE: https://cwiki.apache.org/confluence/display/WW/S2-068
CVE-2025-66004 (A Path Traversal vulnerability in usbmuxd allows local users
to escala ...)
- TODO: check
+ - usbmuxd <unfixed>
+ NOTE: https://bugzilla.opensuse.org/show_bug.cgi?id=1254302
+ NOTE: https://github.com/libimobiledevice/usbmuxd/issues/272
+ NOTE: Fixed by:
https://github.com/libimobiledevice/usbmuxd/commit/3ded00c9985a5108cfc7591a309f9a23d57a8cba
CVE-2025-65815 (A lack of security checks in the file import process of AB
TECHNOLOGY ...)
NOT-FOR-US: AB TECHNOLOGY Document Reader
CVE-2025-65814 (A lack of security checks in the file import process of RHOPHI
Analyti ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8f55fc5de123450ba4c5ddc3b6669f330bf47ba2
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8f55fc5de123450ba4c5ddc3b6669f330bf47ba2
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
