[Git][security-tracker-team/security-tracker][master] 3 commits: Triage CVE-2025-6069 in jython for bullseye LTS.

[Chris Lamb (@lamby)]

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2975aef1 by Chris Lamb at 2025-06-18T09:40:02-07:00
Triage CVE-2025-6069 in jython for bullseye LTS.

- - - - -
67f0ed9d by Chris Lamb at 2025-06-18T09:40:43-07:00
Triage CVE-2025-6069 in python2.7 for bullseye LTS.

- - - - -
b42206ce by Chris Lamb at 2025-06-18T09:41:21-07:00
data/dla-needed.txt: Triage gdk-pixbuf for bullseye LTS (CVE-2025-6199)

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -1491,8 +1491,10 @@ CVE-2025-6069 (The html.parser.HTMLParser class had worse-case quadratic complex
 	[bookworm] - python3.11 <no-dsa> (Minor issue)
 	- python3.9 <removed>
 	- python2.7 <removed>
+	[bullseye] - python2.7 <end-of-life> (EOL in bullseye LTS)
 	- jython <unfixed>
 	[bookworm] - jython <no-dsa> (Minor issue)
+	[bullseye] - jython <end-of-life> (EOL in bullseye LTS)
 	NOTE: https://mail.python.org/archives/list/security-announce@python.org/thread/K5PIYLR6EP3WR7ZOKKYQUWEDNQVUXOYM/
 	NOTE: https://github.com/python/cpython/issues/135462
 	NOTE: https://github.com/python/cpython/pull/135464


=====================================
data/dla-needed.txt
=====================================
@@ -116,6 +116,9 @@ freeimage
   NOTE: 20240922: Many postponed CVE.
   NOTE: 20241202: still WIP (santiago)
 --
+gdk-pixbuf
+  NOTE: 20250618: Added by Front-Desk (lamby)
+--
 gimp (Adrian Bunk)
   NOTE: 20250410: Added by Front-Desk (Beuc)
   NOTE: 20250410: CVE-2025-2760 may need a custom patch as upstream now focuses on gimp3,



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/5e3d7db2658db0fc9ca146ab3e8c5ae92d6dafd4...b42206ce3545924bffd2826e61e138925cf9d496

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/5e3d7db2658db0fc9ca146ab3e8c5ae92d6dafd4...b42206ce3545924bffd2826e61e138925cf9d496
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250618/eada2f0e/attachment-0001.htm>