Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 61c76e9f by Salvatore Bonaccorso at 2025-10-08T22:11:04+02:00 Add CVE-2025-8291/python - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,5 +1,13 @@ CVE-2025-8291 (The 'zipfile' module would not check the validity of the ZIP64 End of ...) - TODO: check + - python3.14 <unfixed> + - python3.13 <unfixed> + - python3.11 <removed> + - python3.9 <removed> + - jython <unfixed> + - pypy3 <unfixed> + NOTE: https://mail.python.org/archives/list/[email protected]/thread/QECOPWMTH4VPPJAXAH2BGTA4XADOP62G/ + NOTE: https://github.com/python/cpython/issues/139700 + NOTE: https://github.com/python/cpython/pull/139702 CVE-2025-6046 REJECTED CVE-2025-62187 (In Ankitects Anki before 25.02.6, crafted sound file references could ...) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/61c76e9fb38d019f171ed7020f182bd09c469081 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/61c76e9fb38d019f171ed7020f182bd09c469081 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
