[Git][security-tracker-team/security-tracker][master] Mark CVE-2025-59432 as no-dsa
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Sep 24 08:24:42 BST 2025
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
8e5c93d1 by Salvatore Bonaccorso at 2025-09-24T09:24:12+02:00
Mark CVE-2025-59432 as no-dsa
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -370,6 +370,8 @@ CVE-2025-59433 (Conventional Changelog generates changelogs and release notes fr
NOT-FOR-US: Node conventional-changelog
CVE-2025-59432 (SCRAM (Salted Challenge Response Authentication Mechanism) is part of ...)
- libscram-java 3.2-1 (bug #1116054)
+ [trixie] - libscram-java <no-dsa> (Minor issue)
+ [bookworm] - libscram-java <no-dsa> (Minor issue)
NOTE: https://github.com/ongres/scram/security/advisories/GHSA-3wfh-36rx-9537
NOTE: Fixed by: https://github.com/ongres/scram/commit/e0b0cf99f05406a0d26682c72fcb5728e95124b3 (3.2)
NOTE: libpgjava needs a sourcefull upload after patching libscram-java
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8e5c93d167e7fc82870999a26cbedd269d17d99a
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8e5c93d167e7fc82870999a26cbedd269d17d99a
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250924/e792c9f6/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list