Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker
Commits:
5705b9fc by Chris Lamb at 2025-10-09T10:36:19-07:00
Triage CVE-2025-8291 in jython for bullseye LTS.
- - - - -
a76e9c83 by Chris Lamb at 2025-10-09T10:36:44-07:00
Triage CVE-2025-61765 in python-socketio for bullseye LTS.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -274,6 +274,7 @@ CVE-2025-8291 (The 'zipfile' module would not check the
validity of the ZIP64 En
- python3.11 <removed>
- python3.9 <removed>
- jython <unfixed>
+ [bullseye] - jython <end-of-life> (EOL in bullseye LTS)
- pypy3 <unfixed>
NOTE:
https://mail.python.org/archives/list/[email protected]/thread/QECOPWMTH4VPPJAXAH2BGTA4XADOP62G/
NOTE: https://github.com/python/cpython/issues/139700
@@ -1173,6 +1174,7 @@ CVE-2025-61765 (python-socketio is a Python
implementation of the Socket.IO real
- python-socketio <unfixed>
[trixie] - python-socketio <no-dsa> (Minor issue)
[bookworm] - python-socketio <no-dsa> (Minor issue)
+ [bullseye] - python-socketio <postponed> (Minor issue; can be fixed in
next update)
NOTE:
https://github.com/miguelgrinberg/python-socketio/security/advisories/GHSA-g8c6-8fjj-2r4m
NOTE:
https://github.com/miguelgrinberg/python-socketio/commit/53f6be094257ed81476b0e212c8cddd6d06ca39a
(v5.14.0)
CVE-2025-61687 (Flowise is a drag & drop user interface to build a customized
large la ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/012adc4c5b7de4cee883db8ae51773f36f77d7dc...a76e9c83ca5481a456b223ac0dbd2da37e6a2ac6
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/012adc4c5b7de4cee883db8ae51773f36f77d7dc...a76e9c83ca5481a456b223ac0dbd2da37e6a2ac6
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
