Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker
Commits:
2975aef1 by Chris Lamb at 2025-06-18T09:40:02-07:00
Triage CVE-2025-6069 in jython for bullseye LTS.
- - - - -
67f0ed9d by Chris Lamb at 2025-06-18T09:40:43-07:00
Triage CVE-2025-6069 in python2.7 for bullseye LTS.
- - - - -
b42206ce by Chris Lamb at 2025-06-18T09:41:21-07:00
data/dla-needed.txt: Triage gdk-pixbuf for bullseye LTS (CVE-2025-6199)
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -1491,8 +1491,10 @@ CVE-2025-6069 (The html.parser.HTMLParser class had
worse-case quadratic complex
[bookworm] - python3.11 <no-dsa> (Minor issue)
- python3.9 <removed>
- python2.7 <removed>
+ [bullseye] - python2.7 <end-of-life> (EOL in bullseye LTS)
- jython <unfixed>
[bookworm] - jython <no-dsa> (Minor issue)
+ [bullseye] - jython <end-of-life> (EOL in bullseye LTS)
NOTE:
https://mail.python.org/archives/list/[email protected]/thread/K5PIYLR6EP3WR7ZOKKYQUWEDNQVUXOYM/
NOTE: https://github.com/python/cpython/issues/135462
NOTE: https://github.com/python/cpython/pull/135464
=====================================
data/dla-needed.txt
=====================================
@@ -116,6 +116,9 @@ freeimage
NOTE: 20240922: Many postponed CVE.
NOTE: 20241202: still WIP (santiago)
--
+gdk-pixbuf
+ NOTE: 20250618: Added by Front-Desk (lamby)
+--
gimp (Adrian Bunk)
NOTE: 20250410: Added by Front-Desk (Beuc)
NOTE: 20250410: CVE-2025-2760 may need a custom patch as upstream now
focuses on gimp3,
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/5e3d7db2658db0fc9ca146ab3e8c5ae92d6dafd4...b42206ce3545924bffd2826e61e138925cf9d496
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/5e3d7db2658db0fc9ca146ab3e8c5ae92d6dafd4...b42206ce3545924bffd2826e61e138925cf9d496
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
