[Git][security-tracker-team/security-tracker][master] 3 commits: mark CVE-2025-49128 as postponed for Bullseye

[Thorsten Alteholz (@alteholz)]

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker


Commits:
62baf4a6 by Thorsten Alteholz at 2025-06-07T19:19:21+02:00
mark CVE-2025-49128 as postponed for Bullseye

- - - - -
3f270a8a by Thorsten Alteholz at 2025-06-07T19:21:04+02:00
mark CVE-2025-47711 and CVE-2025-47712 as postponed for Bullseye

- - - - -
9e77b3a5 by Thorsten Alteholz at 2025-06-07T19:21:54+02:00
mark CVE-2023-47466 as postponed for Bullseye

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2,6 +2,7 @@ CVE-2025-5814 (The Profiler \u2013 What Slowing Down Your WP plugin for WordPres
 	NOT-FOR-US: WordPress plugin
 CVE-2025-49128 (Jackson-core contains core low-level incremental ("streaming") parser  ...)
 	- jackson-core 2.13.0-1
+	[bullseye] - jackson-core <postponed> (Minor issue)
 	NOTE: https://github.com/FasterXML/jackson-core/security/advisories/GHSA-wf8f-6423-gfxg
 	NOTE: https://github.com/FasterXML/jackson-core/pull/652
 	NOTE: https://github.com/FasterXML/jackson-core/commit/a6c297682737dde13337cb7c3020f299518609a8 (jackson-core-2.13.0-rc1)
@@ -3844,6 +3845,7 @@ CVE-2024-12093 (An issue has been discovered in GitLab CE/EE affecting all versi
 CVE-2023-47466 (TagLib before 2.0 allows a segmentation violation and application cras ...)
 	- taglib 2.0.2-1
 	[bookworm] - taglib <no-dsa> (Minor issue)
+	[bullseye] - taglib <postponed> (Minor issue)
 	NOTE: https://github.com/taglib/taglib/issues/1163
 	NOTE: https://github.com/taglib/taglib/pull/1164
 	NOTE: Fixed by: https://github.com/taglib/taglib/commit/dfa33bec0806cbb45785accb8cc6c2048a7d40cf (v2.0beta)
@@ -7632,12 +7634,14 @@ CVE-2023-49641 (Billing Software v1.0 is vulnerable to multiple Unauthenticated
 CVE-2025-47712
 	- nbdkit <unfixed> (bug #1105228)
 	[bookworm] - nbdkit <no-dsa> (Minor issue)
+	[bullseye] - nbdkit <postponed> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2365724
 	NOTE: Fixed by: https://gitlab.com/nbdkit/nbdkit/-/commit/a486f88d1eea653ea88b0bf8804c4825dab25ec7 (v1.43.7)
 	NOTE: Fixed by: https://gitlab.com/nbdkit/nbdkit/-/commit/c3ed72811aca5684490b198737b2f0b921741547 (v1.42.3)
 CVE-2025-47711
 	- nbdkit <unfixed> (bug #1105227)
 	[bookworm] - nbdkit <no-dsa> (Minor issue)
+	[bullseye] - nbdkit <postponed> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2365687
 	NOTE: Fixed by: https://gitlab.com/nbdkit/nbdkit/-/commit/e6f96bd1b77c0cc927ce6aeff650b52238304f39 (v1.43.7)
 	NOTE: Fixed by: https://gitlab.com/nbdkit/nbdkit/-/commit/c3c1950867ea8d9c2108ff066ed9e78dde3cfc3f (v1.42.3)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/34dbe8b7dc1824031ef9d68fcca41d8f12863d58...9e77b3a571fad2ae7fc8b5d74f22c06b62de328a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/34dbe8b7dc1824031ef9d68fcca41d8f12863d58...9e77b3a571fad2ae7fc8b5d74f22c06b62de328a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250607/a8a90170/attachment.htm>