[Git][security-tracker-team/security-tracker][master] Mark CVE-2025-59432/libscram-java as postponed for bullseye
Utkarsh Gupta (@utkarsh)
utkarsh at debian.org
Wed Sep 24 16:11:22 BST 2025
Utkarsh Gupta pushed to branch master at Debian Security Tracker / security-tracker
Commits:
543df1e8 by Utkarsh Gupta at 2025-09-24T20:41:01+05:30
Mark CVE-2025-59432/libscram-java as postponed for bullseye
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -557,6 +557,7 @@ CVE-2025-59432 (SCRAM (Salted Challenge Response Authentication Mechanism) is pa
- libscram-java 3.2-1 (bug #1116054)
[trixie] - libscram-java <no-dsa> (Minor issue)
[bookworm] - libscram-java <no-dsa> (Minor issue)
+ [bullseye] - libscram-java <postponed> (Minor issue)
NOTE: https://github.com/ongres/scram/security/advisories/GHSA-3wfh-36rx-9537
NOTE: Fixed by: https://github.com/ongres/scram/commit/e0b0cf99f05406a0d26682c72fcb5728e95124b3 (3.2)
NOTE: libpgjava needs a sourcefull upload after patching libscram-java
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/543df1e880be29a4a0d757ba5f1c3039e44e8b64
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/543df1e880be29a4a0d757ba5f1c3039e44e8b64
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250924/0b37cc5d/attachment.htm>
More information about the debian-security-tracker-commits
mailing list