[Git][security-tracker-team/security-tracker][master] 2 commits: Mark CVE-2025-48074/openexr as postponed for bullseye

[Utkarsh Gupta (@utkarsh)]

Utkarsh Gupta pushed to branch master at Debian Security Tracker / security-tracker


Commits:
01905f58 by Utkarsh Gupta at 2025-08-04T06:15:56+05:30
Mark CVE-2025-48074/openexr as postponed for bullseye

- - - - -
38d04e8c by Utkarsh Gupta at 2025-08-04T06:17:50+05:30
Mark CVE-2025-8194/python3.9 as postponed for bullseye

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -302,6 +302,7 @@ CVE-2025-49832 (Asterisk is an open source private branch exchange and telephony
 CVE-2025-48074 (OpenEXR provides the specification and reference implementation of the ...)
 	- openexr <unfixed> (bug #1110261)
 	[bookworm] - openexr <no-dsa> (Minor issue)
+	[bullseye] - openexr <postponed> (Minor issue)
 	NOTE: https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-x22w-82jp-8rvf
 	NOTE: https://github.com/AcademySoftwareFoundation/openexr/commit/501be087faa62d0fb7115ce3a0ebd7b4ef0117fc (v3.3.3-rc)
 CVE-2025-46018 (CSC Pay Mobile App 2.19.4 (fixed in version 2.20.0) contains a vulnera ...)
@@ -1293,6 +1294,7 @@ CVE-2025-8194 (There is a defect in the CPython \u201ctarfile\u201d module affec
 	- python3.11 <removed>
 	[bookworm] - python3.11 <no-dsa> (Minor issue)
 	- python3.9 <removed>
+	[bullseye] - python3.9 <postponed> (Minor issue)
 	- python2.7 <removed>
 	[bullseye] - python2.7 <end-of-life> (EOL in bullseye LTS)
 	NOTE: https://github.com/python/cpython/issues/130577



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/bf2bc116ad1dfbec0b6dd327e2a9f10561e7e097...38d04e8ceb7c82ae19ffb81a1f8df4ecd8ba57a9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/bf2bc116ad1dfbec0b6dd327e2a9f10561e7e097...38d04e8ceb7c82ae19ffb81a1f8df4ecd8ba57a9
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250804/529aaeae/attachment-0001.htm>