[Git][security-tracker-team/security-tracker][master] Add CVE-2025-62611/aiomysql

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f0dd358d by Salvatore Bonaccorso at 2025-10-23T23:02:43+02:00
Add CVE-2025-62611/aiomysql

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -241,7 +241,10 @@ CVE-2025-6833 (The All in One Time Clock Lite \u2013 Tracking Employee Time Has
 CVE-2025-62659 (Improper Neutralization of Input During Web Page Generation (XSS or 'C ...)
 	NOT-FOR-US: MediaWiki extensions/skins not packaged in Debian
 CVE-2025-62611 (aiomysql is a library for accessing a MySQL database from the asyncio. ...)
-	TODO: check
+	- aiomysql <unfixed>
+	NOTE: https://github.com/aio-libs/aiomysql/security/advisories/GHSA-r397-ff8c-wv2g
+	NOTE: https://github.com/aio-libs/aiomysql/pull/1044
+	NOTE: Fixed by: https://github.com/aio-libs/aiomysql/commit/32c4520dae3711367ded74a4726dcb8bb8919538 (v0.3.2)
 CVE-2025-62610 (Hono is a Web application framework that provides support for any Java ...)
 	NOT-FOR-US: Hono
 CVE-2025-62607 (Nautobot Single Source of Truth (SSoT) is an app for Nautobot. Prior t ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f0dd358d848a46dfca6e612d8f893834a2cd3320

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f0dd358d848a46dfca6e612d8f893834a2cd3320
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251023/fd615451/attachment.htm>