[Git][security-tracker-team/security-tracker][master] 2 commits: mark CVE-2025-59160 as EOL for Bullseye
Thorsten Alteholz (@alteholz)
alteholz at debian.org
Wed Sep 17 15:30:55 BST 2025
Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker
Commits:
f5a277ed by Thorsten Alteholz at 2025-09-17T16:20:45+02:00
mark CVE-2025-59160 as EOL for Bullseye
- - - - -
88980477 by Thorsten Alteholz at 2025-09-17T16:23:43+02:00
mark CVE-2024-44905 as postponed for Bullseye
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -120,6 +120,7 @@ CVE-2025-59161 (Element Web is a Matrix web client built using the Matrix React
- element-web <itp> (bug #866502)
CVE-2025-59160 (Matrix JavaScript SDK is a Matrix Client-Server SDK for JavaScript and ...)
- node-matrix-js-sdk <removed>
+ [bullseye] - node-matrix-js-sdk <end-of-life> (see #1094651)
CVE-2025-59050 (Greenshot is an open source Windows screenshot utility. Greenshot 1.3. ...)
NOT-FOR-US: Greenshot
CVE-2025-58749 (WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssemb ...)
@@ -30717,6 +30718,7 @@ CVE-2024-44905 (go-pg pg v10.13.0 was discovered to contain a SQL injection vuln
- golang-gopkg-pg.v5 <unfixed> (bug #1111939)
[trixie] - golang-gopkg-pg.v5 <no-dsa> (Minor issue)
[bookworm] - golang-gopkg-pg.v5 <no-dsa> (Minor issue)
+ [bullseye] - golang-gopkg-pg.v5 <postponed> (Minor issue)
NOTE: https://github.com/advisories/GHSA-6xp3-p59p-q4fj
NOTE: Fixed by: https://github.com/go-pg/pg/commit/eff50a43724e52347559687a6945c116afbb41c1 (v10.15.0)
CVE-2023-45256 (Multiple SQL injection vulnerabilities in the EuroInformation Monetico ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/559ce5e0c2f78ef879ff3996f35ebc6b10336731...889804776dccea8aa0303004e4ba3bf566c476b8
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/559ce5e0c2f78ef879ff3996f35ebc6b10336731...889804776dccea8aa0303004e4ba3bf566c476b8
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250917/b259a400/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list