[Git][security-tracker-team/security-tracker][master] 2 commits: Triage CVE-2025-8291 in jython for bullseye LTS.

[Chris Lamb (@lamby)]

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5705b9fc by Chris Lamb at 2025-10-09T10:36:19-07:00
Triage CVE-2025-8291 in jython for bullseye LTS.

- - - - -
a76e9c83 by Chris Lamb at 2025-10-09T10:36:44-07:00
Triage CVE-2025-61765 in python-socketio for bullseye LTS.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -274,6 +274,7 @@ CVE-2025-8291 (The 'zipfile' module would not check the validity of the ZIP64 En
 	- python3.11 <removed>
 	- python3.9 <removed>
 	- jython <unfixed>
+	[bullseye] - jython <end-of-life> (EOL in bullseye LTS)
 	- pypy3 <unfixed>
 	NOTE: https://mail.python.org/archives/list/security-announce@python.org/thread/QECOPWMTH4VPPJAXAH2BGTA4XADOP62G/
 	NOTE: https://github.com/python/cpython/issues/139700
@@ -1173,6 +1174,7 @@ CVE-2025-61765 (python-socketio is a Python implementation of the Socket.IO real
 	- python-socketio <unfixed>
 	[trixie] - python-socketio <no-dsa> (Minor issue)
 	[bookworm] - python-socketio <no-dsa> (Minor issue)
+	[bullseye] - python-socketio <postponed> (Minor issue; can be fixed in next update)
 	NOTE: https://github.com/miguelgrinberg/python-socketio/security/advisories/GHSA-g8c6-8fjj-2r4m
 	NOTE: https://github.com/miguelgrinberg/python-socketio/commit/53f6be094257ed81476b0e212c8cddd6d06ca39a (v5.14.0)
 CVE-2025-61687 (Flowise is a drag & drop user interface to build a customized large la ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/012adc4c5b7de4cee883db8ae51773f36f77d7dc...a76e9c83ca5481a456b223ac0dbd2da37e6a2ac6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/012adc4c5b7de4cee883db8ae51773f36f77d7dc...a76e9c83ca5481a456b223ac0dbd2da37e6a2ac6
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251009/fde0c653/attachment.htm>