Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
c1eafa36 by Moritz Muehlenhoff at 2025-08-19T08:31:48+02:00
new spring issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -63,7 +63,9 @@ CVE-2025-43732 (Liferay Portal 7.4.0 through 7.4.3.132, and
Liferay DXP 2025.Q1.
CVE-2025-43731 (A reflected cross-site scripting (XSS) vulnerability in the
Liferay Po ...)
NOT-FOR-US: Liferay
CVE-2025-41242 (Spring Framework MVC applications can be vulnerable to a
\u201cPath Tr ...)
- TODO: check
+ - libspring-java <unfixed> (unimportant)
+ NOTE: https://spring.io/security/cve-2025-41234
+ NOTE: Only supported for building applications shipped in Debian, see
README.Debian.security
CVE-2025-3639 (Liferay Portal 7.3.0 through 7.4.3.132, and Liferay DXP 2025.Q1
throug ...)
NOT-FOR-US: Liferay
CVE-2025-36120 (IBM Storage Virtualize 8.4, 8.5, 8.6, and 8.7 could allow an
authentic ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c1eafa36ebc807ca5530c2b657f53c2d5330f9a4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c1eafa36ebc807ca5530c2b657f53c2d5330f9a4
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
