Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
89a2ec5c by Salvatore Bonaccorso at 2026-01-16T22:17:07+01:00
Update status for CVE-2025-15497/openvpn
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -181,7 +181,12 @@ CVE-2025-60021 (Remote command injection vulnerability in
heap profiler builtin
- brpc <itp> (bug #1060006)
CVE-2025-15497
- openvpn 2.7.0~rc5-1
- NOTE:
https://github.com/OpenVPN/openvpn/commit/e0e0720ac35e4929ed0a9b47d5509907802bc718
+ [trixie] - openvpn <not-affected> (Vulnerable code introduced later)
+ [bookworm] - openvpn <not-affected> (Vulnerable code introduced later)
+ [bullseye] - openvpn <not-affected> (Vulnerable code introduced later)
+ NOTE:
https://community.openvpn.net/Security%20Announcements/CVE-2025-15497
+ NOTE: Introduced with:
https://github.com/OpenVPN/openvpn/commit/92adbc88b1b37095cebde2a1c5b6ae242f382678
(v2.7_alpha1)
+ NOTE: Fixed by:
https://github.com/OpenVPN/openvpn/commit/e0e0720ac35e4929ed0a9b47d5509907802bc718
CVE-2026-23769 (lucy-xss-filter before commit e5826c0 allows an attacker to
execute ma ...)
TODO: check
CVE-2026-23768 (lucy-xss-filter before commit 7c1de6d allows an attacker to
induce ser ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/89a2ec5c29ec7b16fa9254e92f6885d8309d78d5
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/89a2ec5c29ec7b16fa9254e92f6885d8309d78d5
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
