Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8b1d6a8f by Salvatore Bonaccorso at 2025-12-20T20:57:19+01:00
Update status for CVE-2025-14946/libnbd
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -171,11 +171,12 @@ CVE-2025-14951 (A security vulnerability has been
detected in code-projects Scho
CVE-2025-14950 (A weakness has been identified in code-projects Scholars
Tracking Syst ...)
NOT-FOR-US: code-projects
CVE-2025-14946 (A flaw was found in libnbd. A malicious actor could exploit
this by co ...)
- - libnbd <unfixed>
+ - libnbd 1.22.5-1
[bookworm] - libnbd <not-affected> (Vulnerable code introduced later)
NOTE: https://libguestfs.org/libnbd-release-notes-1.24.1.html#Security
NOTE:
https://lists.libguestfs.org/archives/list/[email protected]/thread/YZMBF3SJRWTRVT5L3KWSNHITFTRMQNTT/
NOTE: Fixed by:
https://gitlab.com/nbdkit/libnbd/-/commit/fffd87a3ba216cf2f9c212e5db96b13b98985edf
(v1.23.9)
+ NOTE: Fixed by:
https://gitlab.com/nbdkit/libnbd/-/commit/f461fe64d21fe8a6d32b56ccb50d06489d2e2698
(v1.22.5)
NOTE: nbd+ssh support introduced with:
https://gitlab.com/nbdkit/libnbd/-/commit/b3802e3a987eb1ffa34c385e36033465d2bd2ba3
(v1.21.2)
CVE-2025-14882 (An API endpoint allowed access to sensitive files from other
users by ...)
NOT-FOR-US: rami.io products
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8b1d6a8f0f185b6676d0825020d67e513f69a8fb
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8b1d6a8f0f185b6676d0825020d67e513f69a8fb
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
