Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6cbb4abe by Salvatore Bonaccorso at 2025-08-10T13:57:23+02:00
Mark CVE-2025-40924 as no-dsa for trixie
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -5814,6 +5814,7 @@ CVE-2025-7700 [NULL Pointer Dereference in FFmpeg ALS
Decoder (libavcodec/alsdec
NOTE: Fixed by:
https://git.ffmpeg.org/gitweb/ffmpeg.git/commitdiff/35a6de137a39f274d5e01ed0e0e6c4f04d0aaf07
CVE-2025-40924 (Catalyst::Plugin::Session before version 0.44 for Perl
generates sessi ...)
- libcatalyst-plugin-session-perl <unfixed> (bug #1109439)
+ [trixie] - libcatalyst-plugin-session-perl <no-dsa> (Minor issue)
[bookworm] - libcatalyst-plugin-session-perl <no-dsa> (Minor issue)
[bullseye] - libcatalyst-plugin-session-perl <postponed> (Minor issue,
weak entropy for session ID)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/31252285/
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6cbb4abec6e85dc4045d0194649e5cab608f7b7f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6cbb4abec6e85dc4045d0194649e5cab608f7b7f
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
