The branch, master has been updated via 98c5740f14cfe8c2b7fdfe81d691e2aa0b13a4c0 (commit) from 39d4e357c4389c69bb22193d080dd29b998d2a9e (commit) - Log ----------------------------------------------------------------- commit 98c5740f14cfe8c2b7fdfe81d691e2aa0b13a4c0 Author: Michael Niedermayer <michael@niedermayer.cc> AuthorDate: Wed Sep 24 20:05:14 2025 +0200 Commit: Michael Niedermayer <michael@niedermayer.cc> CommitDate: Wed Sep 24 20:05:14 2025 +0200 web/security: add more CVEs diff --git a/src/security b/src/security index f98b7c9..ea64661 100644 --- a/src/security +++ b/src/security @@ -5,6 +5,9 @@ Fixes following vulnerabilities: </p> <pre> +CVE-2025-59733, 0469d68acb52081ca8385b844b9650398242be0f, BIGSLEEP-436511754 +CVE-2025-59734, d311382c38df9c2237b33a9e8e860a5da7d2895d, BIGSLEEP-440183164 +CVE-2025-59734, c41a70b6bb79707e1e3a4b0e31950cd986b9f50e, BIGSLEEP-440183164 </pre> @@ -25,6 +28,14 @@ CVE-2025-1816, 0526535cd58444dd264e810b2f3348b4d96cff3b, ticket/11475, CVE-2025-22919, 1446e37d3d032e1452844778b3e6ba2c20f0c322, ticket/11385, CVE-2025-22920, 4bf784c0e5615c3f934e677d5de093a8be7da7ae, ticket/11389 never affected a release CVE-2025-25471, fd1772b7475d0d5673a5dd314ee78443d0be4cf1, ticket/11417 never affected a release +CVE-2025-59728, ce0a655f85c1144d19a4acad59afbb92e4997e30, BIGSLEEP-433502298 +CVE-2025-59729, 33ae6cda71e6d34c9081a612abae00e2c7d39f72, BIGSLEEP-433513232 +CVE-2025-59730, 3ccd7d8c8e85aaae0c6d6cc88ea6cb5309d56cdc, BIGSLEEP-434637586 +CVE-2025-59731, 0d9c003d76383e82b57b6d5aa33776709d0cda2c, BIGSLEEP-436510153 +CVE-2025-59732, f45da79b2c336c5f8f3e563d72b8a22fecdcde0c, BIGSLEEP-436510316 +CVE-2025-59733, de76fb27a6e6da0431154ce9093933281a38a889 / 0469d68acb52081ca8385b844b9650398242be0f, BIGSLEEP-436511754 +CVE-2025-59734, af310e68db0791b94753a9670c9a9ef0d717e32a / d311382c38df9c2237b33a9e8e860a5da7d2895d, BIGSLEEP-440183164 +CVE-2025-59734, c3747e011e7c7107ad6ef4c9e0a1c26490e2c30f / c41a70b6bb79707e1e3a4b0e31950cd986b9f50e, BIGSLEEP-440183164 </pre> @@ -36,6 +47,10 @@ Fixes following vulnerabilities: </p> <pre> CVE-2025-1594, c2184b65d214d60f2d3df86a11ca502567a3d134, ticket/11418 +CVE-2025-59728, 342ea86330ae388baf686fa220892833d55a1c3f / ce0a655f85c1144d19a4acad59afbb92e4997e30, BIGSLEEP-433502298, +CVE-2025-59731, d7e188f33f638d85a1ab70943bde70359454b05c / 0d9c003d76383e82b57b6d5aa33776709d0cda2c, BIGSLEEP-436510153, +CVE-2025-59732, 97932677dbc29c1173f3361886022426ac74197e / f45da79b2c336c5f8f3e563d72b8a22fecdcde0c, BIGSLEEP-436510316, +CVE-2025-59733, a9ec8317498b62192cc3df95ef2523eae8ec0294 / 0469d68acb52081ca8385b844b9650398242be0f, BIGSLEEP-436511754, </pre> <h3>7.1.1</h3> @@ -68,7 +83,15 @@ CVE-2024-35368, 4513300989502090c4fd6560544dce399a8cd53c (specific to builds wit Fixes following vulnerabilities: </p> <pre> +CVE-2023-6602, 8e95a9177eb95c260b16e154c71c35767a14ed10 / 91d96dc8ddaebe0b6cb393f672085e6bfaf15a31 +CVE-2023-6604, 8e95a9177eb95c260b16e154c71c35767a14ed10 / 91d96dc8ddaebe0b6cb393f672085e6bfaf15a31 +CVE-2023-6605, 7dd232e5876f5144a53389aa744c2614a5a3151d / 4c96d6bf75357ab13808efc9f08c1b41b1bf5bdf +CVE-2024-35368, 26737680d3f3f5b27cd0c0a7049d8330a2746172 / 4513300989502090c4fd6560544dce399a8cd53c +CVE-2025-0518, 1e3b60a916c3d6f7e1e0642f8bd50639c14a07c8 / b5b6391d64807578ab872dc58fb8aa621dcfc38a CVE-2025-1594, f98f142da571653436596ccad2d09c7e39bfd4fb, ticket/11418 +CVE-2025-1816, 695dcf29c21911db19cc41722af94ece131303d8 / 0526535cd58444dd264e810b2f3348b4d96cff3b, ticket/11475, +CVE-2025-22919, ab650a52845bd8df25fbd4710b2c25c676461438 / 1446e37d3d032e1452844778b3e6ba2c20f0c322, ticket/11385 +CVE-2025-59728, cc6371d48d10f90571b40eb9680ce7198c4b4532 / ce0a655f85c1144d19a4acad59afbb92e4997e30, BIGSLEEP-433502298 </pre> <h3>7.0.2</h3> @@ -116,6 +139,10 @@ CVE-2024-35367, bed04417b4d38af7a1b477b24ea6e26547e32373 / 09e6840cf7a3ee07a73c3 CVE-2024-35368, b43a12363c1fef0efa7eac15b6b830417656db15 / 4513300989502090c4fd6560544dce399a8cd53c CVE-2025-0518, 43f64690ad9df72976bcbd6ea9e41b2542db2464 / b5b6391d64807578ab872dc58fb8aa621dcfc38a CVE-2025-22919, e2b20632b8c71a4e174511f8ff6e8342e0c63bd3 / 1446e37d3d032e1452844778b3e6ba2c20f0c322, ticket/11385 +CVE-2025-59728, 01c3093510a5b69d3c7ac3a976eb6a58c2510cfd / ce0a655f85c1144d19a4acad59afbb92e4997e30, BIGSLEEP-433502298 +CVE-2025-59731, be682029ae18b80fa9b27f0715ca77323409379c / 0d9c003d76383e82b57b6d5aa33776709d0cda2c, BIGSLEEP-436510153 +CVE-2025-59732, fa543b33f63478090137d124c20ff97f76251254 / f45da79b2c336c5f8f3e563d72b8a22fecdcde0c, BIGSLEEP-436510316 +CVE-2025-59733, a2e8dc01c0a50d2ec8c85d836bda8eaef6891e50 / 0469d68acb52081ca8385b844b9650398242be0f, BIGSLEEP-436511754 </pre> <h3>6.1.2</h3> @@ -179,6 +206,10 @@ CVE-2024-35367, 1a874e645d4a0adef9b494482fc67d12d35395cd / 09e6840cf7a3ee07a73c3 CVE-2024-35368, d45964ac04a83f02cb6ddc63af6d0b646c7d9082 / 4513300989502090c4fd6560544dce399a8cd53c CVE-2025-0518, edfcade702b41de4417e2597ba2aff6ecbdead0e / b5b6391d64807578ab872dc58fb8aa621dcfc38a CVE-2025-22919, a01eaecf6325cefab5b26e0d905df6662db37be1 / 1446e37d3d032e1452844778b3e6ba2c20f0c322, ticket/11385 +CVE-2025-59728, 6e9758a4e7f983d67a63218021c5b9002264355e / ce0a655f85c1144d19a4acad59afbb92e4997e30, BIGSLEEP-433502298 +CVE-2025-59731, ec959281897aa29076f3083edbc2306357342d7c / 0d9c003d76383e82b57b6d5aa33776709d0cda2c, BIGSLEEP-436510153 +CVE-2025-59732, 20708b957e8d4d57801c0b7ac52131988b093a49 / f45da79b2c336c5f8f3e563d72b8a22fecdcde0c, BIGSLEEP-436510316 +CVE-2025-59733, 1080d0e3cded6d8e177c2ce8b6649bc238be2ff6 / 0469d68acb52081ca8385b844b9650398242be0f, BIGSLEEP-436511754 </pre> <h3>5.1.6</h3> ----------------------------------------------------------------------- Summary of changes: src/security | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) hooks/post-receive --